logo
welcome
Ars Technica

Ars Technica

Backdoor slips into popular code library, drains ~$155k from digital wallets

Ars Technica
Summary
Nutrition label

69% Informative

The supply-chain attack targeted solana-web3.js , a collection of JavaScript code used by developers of decentralized apps for interacting with the Solana blockchain.

These dapps’ allow people to sign smart contracts that, in theory, operate autonomously in executing currency trades among two or more parties when certain agreed-upon conditions are met.

The backdoor came in the form of code that collected private keys and wallet addresses when apps that handle private keys incorporated solana.js versions 1.95.6 and 1.97.7 .

VR Score

62

Informative language

56

Neutral language

28

Article tone

informal

Language

English

Language complexity

63

Offensive language

not offensive

Hate speech

not hateful

Attention-grabbing headline

not detected

Known propaganda techniques

not detected

Time-value

short-lived

Source diversity

1

Affiliate links

no affiliate links