Something big has happened on Solana again.

A user recently got wrecked—the wallet owner privileges were directly changed, and $3 million was gone. The good news is that another $2 million DeFi position was recovered with the help of multiple parties.

This time, the trick was a bit technical—the attacker got the victim to sign a transaction with an "assign" instruction. It looked harmless, but in reality, wallet ownership was transferred just like that. The whole process happened quietly and unnoticed.

On-chain data has laid out the entire attack process in detail. We've actually seen similar tactics on TRON before. Now it seems that no matter which chain it is, you really need to be extra careful before signing anything.

A $5 million lesson—painful enough.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

14 Likes

Reward
14
6
Repost
Share

Comment

0/400

SmartContractWorker

· 12-03 12:04

Damn, it's the assign command again. This trick is really impossible to guard against.

View OriginalReply0

DegenRecoveryGroup

· 12-03 12:03

It's the assign permission issue again, really impossible to guard against. 3 million gone just for fun? This guy is way too careless, didn't even take a look before signing?

View OriginalReply0

CompoundPersonality

· 12-03 11:57

Just by signing a transaction, it's all gone. This trick is really ruthless. Is the assign command really that sneaky... I need to look into it.

View OriginalReply0

TokenTaxonomist

· 12-03 11:53

ngl, the assign instruction trick is taxonomically just social engineering wrapped in cryptographic clothing. per my analysis, this is evolutionary dead-end behavior for anyone not running transaction simulations first. statistically speaking, solana devs really need better UX warnings here.

Reply0

AltcoinHunter

· 12-03 11:46

Damn, it's the same old assign command trick again. No wonder I got trapped. Guys, you really have to read the contract before signing anything—this is no small matter. --- 3 million gone just like that... This is why I never keep large amounts in my wallet. Diversification is key. --- Honestly, TRON saw this trick ages ago. Solana users are still falling for it—it's kind of ridiculous... --- Lost 5 million in half an hour, that's got to be a heartbreaking loss. Whatever, not thinking about it, moving on to ape into the next 100x opportunity. --- This is what I've always said—not that there's a problem with the contract, but you have to be ruthless when it comes to signing. Who the hell actually reads every command in detail?

View OriginalReply0

RunWhenCut

· 12-03 11:40

Just by signing the assign instruction, you end up selling your wallet. I really didn't expect it could be done this way. How careless do you have to be to fall for this trick?

View OriginalReply0

Trending TopicsView More
#JoinGrowthPointsDrawToWiniPhone17
257.2K Popularity
#DecemberMarketOutlook
50.73K Popularity
#PostonSquaretoEarn$50
6.05K Popularity
#LINKETFToLaunch
7.67K Popularity
#SharingMy100xToken
8.13K Popularity

Hot Gate FunView More

1
beirasteThe Heir of Gate
MC:$0.1Holders:1
0.00%
2
GlooGloo
MC:$3.67KHolders:2
0.11%
3
GpepeGateFrog
MC:$3.65KHolders:3
0.05%
4
GPGate Panda
MC:$3.82KHolders:2
0.77%
5
chorizochorigate
MC:$3.6KHolders:1
0.00%

Sitemap