Squads warns of address poisoning attack as scammers deploy fake Solana multisigs with lookalike vanity addresses

Squads detected an active address poisoning campaign where attackers create fake multisig accounts using vanity addresses designed to closely mimic legitimate ones, aiming to trick users into sending funds to attacker-controlled wallets. No users have been impacted so far. The protocol urges users to ignore any multisig they didn't create or weren't explicitly added to by their team — a social engineering play exploiting address similarity rather than any protocol-level vulnerability.

TLDR by @Benthic

More coverage

• Squads Sounds Alarm on Address Poisoning Scheme Hitting ... (mexc.com)
• Introducing Advanced Multisig Security Solution for Solana (range.org)
• LockRelease Pool with Squads Governance - Ccip - Chainlink Docs (docs.chain.link)
• Access Solana with Multisig Security | Squads Update - SquadsX (squads.xyz)
• We've identified an address poisoning attack targeting Squads users ... (x.com)

Explore the topic

• Solana
• Scam