New apps have emerged that can empty your crypto wallet. This time we are talking about two different apps on the Solana (SOL) network.
The apps called “Aqua” and “Vanish” use a technique called “bit flip”. This allows attackers to empty crypto wallets. For this reason, these types of apps are also known as “drainers” in the crypto world.
Solana apps rob your crypto wallet
Cybersecurity company Blowfish warned recently the crypto community for these new drainers on Solana.
This software can change the details of a transaction even if it has already been signed by the user Private keyor private key.
Regular decentralized apps (dApps) are then manipulated on Solana. The app with which the user is normally allowed to carry out a transaction is then secretly changed. This allows a legitimate transaction to be intercepted.
This is also known as a bit flip attack because the value of certain bits within the encrypted data is secretly changed. As a result, the victim unsuspectingly signs a transaction that appears valid at first glance.
The attacker then temporarily takes over the transaction and changes the state through a separate transaction. This gives the impression that the original app is sending SOL as expected, but in reality it is emptying the victim’s wallet.
“Sounds like a nightmare, doesn’t it?” said Blowfish.
More and more crypto drainers on the Solana network
This form of cybercrime is offered as a so-called “Scam-as-a-Service”. This happens through online marketplaces where malicious parties can obtain such apps for a fee.
However, this is not a new type of attack in the cryptocurrency world, but the recent increase in this type of attack on the Solana network is a cause for concern.
According to a recent report from analytics firm Chainalysis, there are already entire communities dedicated to Solana drainage devices. One of these groups even has more than 6,000 members.
Blowfish has now found measures to automatically block the new drains and says it will be keeping a close eye on this type of activity.