Risk Disclosure: This website's content is not investment advice and offers no trading guidance or related services. Per regulations from the PBOC and other authorities, users must be aware of virtual currency risks. Contact us / [email protected] ICP License: 琼ICP备2022009338号
TechFlow reports that on December 9, the Web3 security team Scam Sniffer stated on X that most Solana wallet coin-stealing programs actively use third-party domains to bypass wallet blacklists. (For example, registering expired DAPP domains and now exploiting XSS vulnerabilities.)
If users see a DAPP pop up a second window (or redirect) requesting them to connect in another window, they should carefully verify its security.
Web3 security team Scam Sniffer has posted on X stating that most Solana wallet token theft programs actively use third-party domains to bypass wallet blacklist protections (for example, registering expired DAPP domains and now exploiting XSS vulnerabilities). If users see a DAPP pop up a second window (or redirect) requesting them to connect in another window, they should carefully verify its security.
Navigating Web3 tides with focused insights
