Fearless Wallet Compromised, Users Urged to Act
The Fearless Wallet browser extension was compromised, leading to unauthorized transactions. Users are advised to create new keypairs and transfer their funds.
Polkadot issued a security alert regarding the Fearless Wallet browser extension, which has been compromised since February 2025. Malicious code within the extension was designed to send users’ private keys to an attacker-controlled server when the wallet was unlocked. This vulnerability has affected multiple users, resulting in unauthorized transactions.
Eight users have reported losses totaling 17,286 DOT, which is equivalent to approximately 20,000 USD. The incident highlights the risks associated with third-party wallet extensions and the importance of securing private keys. Affected users are strongly urged to create new keypairs in a different wallet and to move their funds immediately to prevent further losses.