Polkadot Community foundation warns Fearless extension contains malicious code, 17,286 coins DOT involved in unauthorized transactions
BIBIBI
AT A GLANCE
The report stated that Fearless some browser extension versions contain malicious code, 8 users reported suspected related unauthorized transactions involving 17,286 coins DOT。
Article
Polkadot Foundation warns Fearless of the risk of private-key leakage from an extension, 17,286 coins DOT involved in a security incident
PANews October 21 reported that Polkadot the community foundation warned that the browser extension of third-party wallet Fearless 3.0.1、3.0.3、3.0.4 and 3.0.5 contain malicious code that may send private keys to an attacker-controlled server when users unlock their wallets. The relevant code was active at different times between 2025 and February October 10, 2026. To date, 8 users have reported unauthorized transactions that may be related to the vulnerability, involving 17,286 coins DOT。
Polkadot The community foundation warned that the browser extension of the third-party wallet Fearless 3.0.1、3.0.3、3.0.4 and 3.0.5 contain malicious code.
02
When users unlock their wallets, private keys may be sent to an attacker-controlled server.
03
The relevant code was active at different times between 2025 and February October 10, 2026.
04
To date, 8 users have reported unauthorized transactions that may be related to the vulnerability, involving 17,286 coins DOT。
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
This is a wallet security warning: the report indicated that Fearless some versions of the browser extension may leak private keys when users unlock their wallets, and users have reported suspected related unauthorized transactions.
Why it matters to readers
Private keys may have been sent to attackers, and the unauthorized transactions described in the report involved 17,286 coins DOT, so users of the listed versions may face asset-security risks.
If you have used the above versions of the Fearless browser extension, follow official subsequent security announcements, fixes, and user handling guidance; the original text did not provide specific remediation steps.
Risks and unknowns
The material does not include Polkadot the community foundation's original announcement or technical investigation details.
8 The unauthorized transactions reported by users are described only as “possibly” related to the vulnerability; the connection has not been confirmed.
The material does not provide on-chain transaction details, confirmed actual losses, or the total number of affected users.
The material does not state whether the malicious code has been removed or whether the risk has been fully contained.
Related Developments
Loading event timeline…
Related concepts
browser extension
This term is not in the glossary yet. Browse related concepts in the glossary.
