Solana
Security incidents tagged Solana. Newest first.
0 Solana incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 688
- Longest quiet run: 687 days (Dec 5–Oct 22)
Show 1 older incident1 older incident
December 2024 1
High@solana/web3.js npm package backdoored to steal private keysPatched
@solana/web3.js (npm) Patched
A publish-access account for @solana/web3.js was compromised. Malicious versions 1.95.6 and 1.95.7, live on npm from 15:20 to 20:25 UTC on 2024-12-03, exfiltrated private key material from apps and bots that handle keys directly. Non-custodial wallets were generally not affected. Fixed in 1.95.8.
Open incident →CVE-2024-54134
