Solana GitHub Bot Found Stealing Wallet Funds

The SlowMist security team recently revealed that the GitHub project “solana-pumpfun-bot”. It contains malicious code that drains users’ wallets.

Once the program is launched, it silently steals the user’s funds. The Solana GitHub Bot steals assets and sends them to a wallet address. That address has already moved funds through the crypto exchange FixedFloat. This discovery is a strong reminder that in crypto, even popular tools can hide serious threats.

The Bot That Bites Back

The “solana-pumpfun-bot” gained popularity among retail traders and developers for helping automate trades on Solana’s pump.fun platform. The bot’s code was openly available on GitHub, giving users the impression it was trustworthy. But under the surface, the code included a backdoor that transferred tokens out of users’ wallets without their consent.

According to SlowMist, after users set up the bot and connected their wallet, the tool triggered a transfer of assets to a malicious address. The stolen funds were then funneled through FixedFloat, a crypto exchange that offers instant swaps and often does not require user verification. As of early July, the flagged address had received thousands of dollars in tokens.

This attack is part of a growing trend where bad actors use open-source platforms like GitHub to spread malware. These projects often look legitimate at first glance, making it hard for even careful users to spot the danger.

More About Crypto Hacks

The Justice Department has announced a coordinated nationwide effort to crack down on North Korean remote IT workers engaged in illegal revenue schemes. Authorities seized 29 bank accounts, took down 21 fake websites, and confiscated over 200 devices linked to these operations.

More than $900,000 in stolen cryptocurrency was recovered, and over 100 U.S. companies were infiltrated by these operatives. Using stolen identities, fake shell companies, and networks of remote computers known as “laptop farms,” the North Korean agents generated and laundered millions of dollars.

Disclaimer

The information discussed by Altcoin Buzz is not financial advice. This is for educational, entertainment, and informational purposes only. Any information or strategies are thoughts and opinions relevant to the accepted risk tolerance levels of the writer/reviewers, and their risk tolerance may differ from yours. We are not responsible for any losses you may incur due to any investments directly or indirectly related to the information provided. Bitcoin and other cryptocurrencies are high-risk investments, so please do your due diligence. Copyright Altcoin Buzz Pte Ltd.