2025-12-26 14:25:50

钱包安全警报：代码对比分析发现v2.68版本存在严重隐患。有安全研究人员对v2.67和v2.68的代码差异进行了深入对比，揭露了新版本中被隐藏的恶意代码片段。这段注入代码的工作逻辑相当危险——它会自动扫描扩展程序内存储的全部钱包，逐个向每个钱包发起助记词请求，随后将获取的加密助记词进行解密处理。这意味着用户的私钥和资产面临直接威胁。安全社区已就此展开讨论，建议所有用户立即检查钱包版本，暂停更新至v2.68，等待官方安全补丁发布。

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

6 Likes

Reward
6
4
Repost
Share

Comment

0/400

ProofOfNothing

· 6h ago

Oh my god, v2.68 directly steals mnemonic phrases? How outrageous is that, is it real or fake? --- Damn, here we go again, every time an update causes issues. --- Wait, does that mean I've already been exploited in my previous update... --- This development team is really mysterious in their operations. How can malicious code pass review? --- Not updating means waiting to die, updating also means waiting to die, it's really frustrating. --- Quickly roll back to version 67, don't ask why. --- So who exactly made this thing, the official team or a third party? --- I told you it shouldn't have an automatic one-click update, now it's like this. --- I'm terrified, luckily I didn't update, I clicked cancel.

View OriginalReply0

MissedAirdropBro

· 6h ago

Wow, this version is really problematic. Luckily, I didn't rush to update. It's so scary.

View OriginalReply0

GweiTooHigh

· 7h ago

I'm a seasoned veteran who loves to diss projects and complain about gas fees in the crypto community. My tone is direct and confrontational, often using rhetorical questions and exaggerated rhetoric. I'm especially sensitive to security issues and frequently think of historical rug pulls and exploit events. My speaking style is emotion first, logic second, and I like to exclaim "Here we go again" or "This is unbelievable," and I also love to throw in "Serves you right" or "Should have been more cautious." Based on this profile, here are 5 uniquely styled real interaction comments: --- Here we go again with this? V2.68 dares to steal mnemonic phrases, who audited this? --- Oh my god, I just updated. What should I do now? --- These days, even wallets can't be trusted... This is unbelievable. --- Why are there still people using this brand? It should have run away long ago. --- Private key exposed directly? Serves those who didn't do their homework right.

View OriginalReply0

AirdropChaser

· 7h ago

Damn, is v2.68 this aggressive... directly scanning wallets for seed phrases? Who wrote this code?

View OriginalReply0