Polkadot warns that the Fearless Wallet browser extension has been stealing private keys since February 2025. If you've used versions 3.0.1 or 3.0.3–3.0.5, move your funds to a new wallet now.

𝕏/@SlowMist_Team •

Revision history

2 recorded changes

🖱️ 23👤 19🤖 4

23 clicks·~4.0k impressions·0.6% CTR

Web Telegram Discord

Want your article here?

Promote with Leviathan News

SlowMist says the malicious extension has been active for nearly 20 months, from February 2025 to October 2026, and that stolen data is encrypted with an empty password and exfiltrated via HTTP GET requests to a remote server. A remote configuration file lets attackers toggle the malicious behavior. Affected versions 3.0.1 and 3.0.3–3.0.5 steal recovery phrases, private keys, and keystore files when wallets are unlocked. Users are advised to treat wallets as compromised, create new wallets with fresh keys, transfer assets, review transactions, and remove the extension; changing passwords or reinstalling is insufficient. Polkadot's Technical Fellowship investigated on behalf of the PCF.

AI summary of the linked source — not editorial content.

Story signal · how it spread on X · via Elfa

as of 22 Oct 09:49 UTC

Spread

Distinct X and Telegram accounts Elfa counted behind this story’s reports, summed over the thread. Not posts, not impressions.

9 accounts

first post 21 Oct 14:13
Leviathan +18.6 h later

DOT reaction

Price change from the first post to 24 hours later (Hyperliquid). BTC over the same window is shown so a market-wide move is not mistaken for a reaction to this story. Not advice.

−5.2% 24h after post

$1.17 → $1.11
BTC −3.1% same window

21 Oct 14:1322 Oct 08:47

Thread · 1 event

21 Oct 14:18First reportFearless Wallet browser extension found leaking users’ private keys9 acc.
22 Oct 08:47Leviathan published this article

All times UTC.

Cited posts

@PolkadotFirst reportOn X ↗
Security Alert for Fearless Wallet Fearless Wallet is a third-party application, built and maintained by an independent team. Following an investigation by the Polkadot Technical Fellowship on behalf of the @PCF_org, it was found that the Fearless Wallet browser extension had…
@wublockchain12 吴说区块链On X ↗
吴说获悉，Polkadot 社区基金会发布安全公告称，第三方钱包 Fearless 的浏览器扩展 3.0.1、3.0.3、3.0.4 及 3.0.5 版本含恶意代码，用户解锁钱包时会将私钥发送至攻击者服务器，代码曾于 2025 年 2 月至 2026 年 10 月 10 日期间不同时段生效。已有 8 名用户报告可能与该漏洞相关的未经授权交易，涉及…
@CoinMarketCapOn X ↗
LATEST: 🚨 Polkadot warns the Fearless Wallet browser extension has been compromised and leaking private keys since February 2025, urging affected users to create a new keypair and move their funds.

Show 3 more cited posts

@BSCNews BSCNOn X ↗
Polkadot reveals security breach across Wallet Extension@Polkadot Technical Fellowship raised a security alert for its community. The team stated that the third-party Fearless Wallet browser extension was compromised and has been leaking users' private keys since February…
@BSCNWire BSCN NewswireOn X ↗
Layer 1 network @Polkadot has warned holders using the third-party Fearless Wallet browser extension that private keys were leaked to attackers. Eight users have reported 17,286 $DOT in unauthorized transactions.https://t.co/DDJ5L2q3gt
@scottmelker The Wolf Of All StreetsOn X ↗
POLKADOT $DOT WARNS THE THIRD-PARTY FEARLESS WALLET BROWSER EXTENSION HAS BEEN COMPROMISED AND LEAKING USERS' PRIVATE KEYS SINCE FEBRUARY 2025 USERS ARE URGED TO CREATE NEW KEYS IN A DIFFERENT WALLET AND MOVE THEIR FUNDS AS SOON AS POSSIBLE

3 more accounts posted about this · 1 Telegram channel (no public link)

TradersTrader calls tracked by Elfa · not advice

Positioning · DOT

Open53 open positions · 51 long · 2 short

Tracked accounts lean long about 97% of the time, so a long-heavy book is normal, not a signal. As of 21 Oct 08:05 UTC.

Whole crypto market, not this story

Crowding89th percentile · vs last 28 days, 50 typical

Pulse 24h91/100 · unusualness of new calls, 0–100, 50 typical, higher means more long than usual

Book97.4% long · 11,032 accounts

As of 22 Oct 08:35 UTC.

Social-monitoring data, not investment advice Elfa prices Hyperliquid post text from Xas of 22 Oct 09:49 UTC

Polkadot warns that the Fearless Wallet browser extension has been stealing private keys since February 2025. If you've used versions 3.0.1 or 3.0.3–3.0.5, move your funds to a new wallet now.