Slow Mist Technology Chief Information Security Officer 23pds issued a warning that the latest version of Phantom wallet may have security bugs, and the victim has explained the risk of Phantom Profile: when a user imports a mnemonic from an unknown source, if the mnemonic has been associated with Phantom Profile, the wallet will automatically log in to the account system, putting the user's assets at risk of theft.
According to the victim's description, when users who do not have Phantom Profile open import such mnemonic words, the wallet will automatically log into the pre-set attacker account system, rather than just importing a single wallet address. Since the latest version of Phantom uses the Unified Profile System, this operation allows attackers to gain access to the user's device, allowing them to monitor the user's subsequent deposit behavior and commit currency theft.
Reminder: Do not import mnemonic words of unknown origin under any circumstances. It is recommended that users use a new device when importing a new wallet to avoid damage to their main assets.
The latest version of Phantom wallet may have security bugs, users need to be alert to risks
2025-02-12 02:26:47
Slow Mist Technology Chief Information Security Security Officer 23pds Post Alertdesk3cryptocurrencydesktopCrypto News
Disclaimer:
1. The information provided does not constitute investment advice. Investors should make independent decisions and bear all risks themselves.
2. The copyright of this content belongs to the original author. The views expressed herein are solely those of the author and do not represent the stance or position of this website.
Previous article：
Phantom 钱包最新版本或存在安全漏洞，用户需警惕风险Next article：
Magic Eden：1640万枚ME将直接分发至申领截止前已质押ME的钱包
