Third-party wallet Fearless Wallet private key leak, 8 users' assets stolen

Polkadot has issued a security warning that the browser extension of the third-party wallet Fearless Wallet has been compromised, intermittently leaking user private keys to attackers since February 2025. Investigations revealed that malicious code sends private keys to servers controlled by attackers when users unlock their wallets.

According to an announcement from the Polkadot Community Foundation, 8 users have reported suspected unauthorized transactions related to this issue, involving 17,286 DOT. Polkadot urges all users who have used this extension to immediately create a new key pair through other wallets and transfer their assets, as merely changing passwords or switching wallet software will not eliminate the risk. Fearless Wallet is developed by an independent team and is not the official wallet of Polkadot.