Solana user loses 3 million dollars due to compromised hidden wallet access

A recent security incident has raised concerns in the Solana community when a user lost over 3 million USD due to sophisticated phishing. The incident exposed risks in Solana’s account structure, where an attacker can change the Owner permission without initiating a fund transfer transaction, making it difficult for victims to detect. Many users mistakenly believe that ownership works the same way as on Ethereum, so they don’t realize that a single signature can alter the entire wallet’s permissions.

According to SlowMist and MistTrack, the attacker manipulated multiple layers of permissions, then cycled assets through cross-chain, CEX, and DeFi platforms, demonstrating increasingly sophisticated money laundering techniques. The victim also had 2 million USD locked in DeFi, which was successfully recovered thanks to timely reporting.

Experts recommend users carefully check URLs, transaction details, avoid suspicious links, use separate wallets for risky activities, limit granting unlimited permissions, and scrutinize every signature request.