GSD-2022-1004952

    Dashboard / Vulnerabilities / GSD-2022-1004952

    GSD-2022-1004952

    Published: 5 Aug 2022Last Modified: 14 Mar 2023

    Summary: Logging of sensitive information in Wallet version Current version and possibly previous versions

    Details: In Slope Wallet, the current version and possibly previous versions the logging of sensitive information (including seed phrases) exist in the wallet software. This can be attacked via access to the logging data (which is reportedly sent in clear text across the Internet) and the logging server resulting in the disclosure of information including seed phrases used to generate cryptographic keys, allowing attackers access to private wallets and stealing funds (roughly 8000 wallets have been reportedly drained at this time). Users of Slope wallet should immediately and securely generate new wallet addresses in a different wallet software and transfer their funds to the new addresses.

    References: https://twitter.com/slope_finance/status/1554937187283656707, https://slope-finance.medium.com/slopes-official-statement-regarding-the-breach-b964e70af0d6, https://www.coindesk.com/business/2022/08/03/solanas-latest-6m-exploit-likely-tied-to-slope-wallet-devs-say/, https://www.theverge.com/2022/8/4/23291180/solana-cryptocurrency-slope-phantom-wallet-theft-supply-chain-attack, https://twitter.com/0xfoobar/status/1554881291451088896, https://twitter.com/Blokchainaholic/status/1555010999383883777, https://twitter.com/MiamiVice_sol/status/1554957292734271488

    Affected packages

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GSD-2022-1004952 | CVE-DB