Solana

Verify

Security

<p>The <a href="https://coinpedia.org/news/what-happened-in-crypto-today-nov-22nd-2024/" target="_blank" rel="noreferrer noopener">cryptocurrency world</a> has witnessed its first recorded case of AI poisoning, where a Solana wallet was compromised, resulting in an estimated loss of $2,500. This incident demonstrates both the potential and the dangers of using AI tools like ChatGPT in Web3 development, as they can inadvertently aid the misuse of compromised assets.</p>   
<h2 class="wp-block-heading" id="h-how-the-attack-happened"><strong>How the Attack Happened</strong></h2>   
<p>On November 21, 2024, a user tried to create a meme token sniping bot for the Solana-based platform Pump.fun using ChatGPT for assistance. Instead of providing secure guidance, the AI chatbot suggested a fraudulent API link disguised as a tool for Solana services.</p>   
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
   https://twitter.com/r_cky0/status/1859656430888026524 
 </div>
</figure>   
<p>The fake API, created by scammers, included a backdoor that intercepted the wallet’s private keys in plaintext and transferred the funds, including SOL, USDC, and meme tokens, to the attackers’ wallet. This wallet is linked to 281 similar thefts from other compromised wallets.</p>   
<p>Investigations traced the malicious API to GitHub repositories where scammers had intentionally planted Trojan-infected Python files, targeting unsuspecting developers</p>   
<h2 class="wp-block-heading" id="h-understanding-ai-poisoning"><strong>Understanding AI poisoning</strong></h2>   
<p>AI poisoning involves introducing corrupted data into the training of AI models, distorting their outputs. In this case, malicious GitHub repositories likely affected ChatGPT’s responses, leading it to generate insecure API recommendations.</p>   
<p>Although OpenAI has not been directly implicated, this event highlights the risks AI systems can pose when applied in specialized areas like blockchain. </p>   
<p>Yu Xian, founder of blockchain security firm<a href="https://x.com/evilcos/status/1859818700389732513" target="_blank" rel="noreferrer noopener"> SlowMist</a>, described the attack as a "wake-up call" for developers. He warned that the growing datasets used for AI training are increasingly vulnerable to tampering, enabling scammers to exploit popular tools like ChatGPT.</p>   
<h3 class="wp-block-heading" id="how-to-stay-protected">How to Stay Protected</h3>   
<p>To reduce the risk of similar incidents, security experts recommend the following precautions:</p>   
<ol class="wp-block-list">
  
 <li><strong>Verify All Code and APIs</strong>: Avoid relying entirely on AI-generated outputs. Conduct thorough audits of code and APIs before using them.</li>   
 <li><strong>Use Separate Wallets</strong>: Keep test wallets and significant assets separate to ensure that experimental bots or unverified tools cannot access valuable funds.</li>   
 <li><strong>Monitor Blockchain Activity</strong>: Work with trusted blockchain security firms, like SlowMist, to identify and respond to emerging threats.</li> 
</ol>   [post_titles_links postid="383624"]   
<p>As blockchain continues to grow, both developers and investors must stay alert to prevent increasingly sophisticated fraud. Balancing innovation with security is critical to protecting the cryptocurrency ecosystem.</p>

AI Gone Rogue? Solana Wallet Hacked in First-Ever AI Poisoning Attack

Table of Contents

CoinPedia News

Other articles published on Nov 22, 2024

Telegram Game Major (MAJOR) Partners with Bitget for Gas-Free Airdrop Claims (22 Nov)

WEMIX PLAY Issue Fixed

MicroStrategy Convertible Notes Now Out of Stock With $3B Raised

Crypto users were at risk 6 months after Apple promised system security

UK government set for crypto regulations next year, officials says

Russia Sees 150+ Crypto Mining Permit Applications Since New Regulations Went Live

Join our free newsletter for daily crypto updates!