Skip to content
EVENT / TOPICHistorical

Fearless Wallet Extension Exposes Private Keys, Threatening User Assets

1 reports1 sources10/25/2026 updated

Current overview (not historical)

AI overview

The Fearless Wallet browser extension has been leaking users’ private keys and recovery phrases since February 2025, allowing unauthorized transfers of assets. The Polkadot Community Foundation warned on October 21 that the third‑party extension collected sensitive data—including recovery phrases, private keys, and keystore files—via HTTP and forwarded it to external servers. Blockchain security firm SlowMist identified the affected versions as 3.0.1, 3.0.3 through 3.0.5. The breach highlights the risks of using third‑party extensions and underscores the need for users to verify the authenticity of wallet software before installation.

Written with AI from the reporting · updated 10/25/2026

Latest developmentOct 25, 19:20
Polkadot’s Fearless Wallet Extension Leaked Private Keys, Exposing 17,286 DOT to Theft
Explore the timeline, relations and evidence
Expand the detailed fact route and sources

Story route

A station-by-station route from the first public evidence onward; every station carries its own evidence and uncertainty.

  1. 1Unclassified fact stationFeb 1, 00:00recorded Oct 25, 19:29single sourcerevised

    Fearless Wallet browser extension leaked private keys since

    Read original source ↗ CryptoSlateReplay this moment in the explorer
    Evidence & revisions · 1 source records
    Subject：
    Fearless Wallet
    Action：
    leaked users' private keys
    Object：
    users' assets
    Occurred (fact side)：
    Feb 1, 00:00
    CryptoSlate ↗Report pageRevision 2 · currently revised
    Published (valid side)：
    Oct 25, 19:20
    First seen (known side)：
    Oct 25, 19:29
    Fact stationSingle source · one-sided claimRevised

    Copy may have been revised later; time replay is bounded. Layer labels group reading only, not causation between layers.

Uncertainty marks flag where to check the sources; they are not proven causation.

Report timeline

Explore every side through dated source reports.

Oct 25
  1. CryptoSlateRelated fact: single sourceSource report revised
    Polkadot’s Fearless Wallet Extension Leaked Private Keys, Exposing 17,286 DOT to Theft

    Report first recorded Oct 25, 19:29

    The Polkadot Community Foundation warned on Oct. 21 that the Fearless Wallet browser extension had been leaking users’ private keys since February 2025. The breach, uncovered by the Polkadot Technical Fellowship, involved malicious code that extracted wallet credentials—recovery phrases, private keys and keystore files—when users unlocked their wallets, sending the data via HTTP to an external server. Eight users reported unauthorized transfers totaling 17,286 DOT. SlowMist identified the compromised extension versions as 3.0.1 and 3.0.3‑3.0.5. The attackers could toggle the malicious behavior remotely, making detection harder. Polkadot’s July 2025 network upgrade shortened the unbonding period for nominators from 28 days to 1–2 days, reducing the window for owners to recover compromised staking accounts before assets become transferable. The foundation urged affected users to generate new keypairs with a different wallet and move remaining funds immediately. Polkadot’s statement said, “If you have used the Fearless Wallet browser extension, please create a new keypair with a different wallet and move your funds as soon as possible.”

    Read original source ↗

Event discussion

Reader opinions are hosted on GitHub Discussions; posting requires a GitHub account. Comments are not verified facts.

Open GitHub Discussions