Polkadot
Security Flaw in Fearless Wallet Browser Extension Leads to Loss of 17,286 DOT
A key-leak vulnerability in four versions of the third-party Fearless Wallet extension exposed user private keys and resulted in stolen DOT funds.
A security notice released by the Polkadot Community Foundation on October 21, 2026, revealed that four versions of the third-party Fearless Wallet browser extension transmitted user private keys to an external attacker-controlled server upon unlock. Eight users have reported unauthorized transactions, resulting in the theft of 17,286 DOT.
The vulnerability is isolated to the third-party extension and does not stem from a flaw in the underlying Polkadot blockchain. The affected releases are versions 3.0.1, 3.0.3, 3.0.4, and 3.0.5. At the time of the warning, the extension listing in the Chrome Web Store showed approximately 6,000 installations.
The foundation advised anyone who used the extension at any point since February 2025 to treat their accounts as compromised. Affected users are urged to generate new private keys using an alternative wallet, specifically recommending Nova Wallet, and transfer their remaining balances immediately.
These two are not the same thing, and one does not produce the other. The left is how this single article reads, from its tone alone. The right is the site’s own call on the asset, from indicators and analysis. Press tone feeds no score and no signal: on the only corpus this site has measured, daily tone tracked the move that had already happened and showed no measurable link with what followed.
More on Polkadot All pieces →
- Neutral Polkadot tokenomics and Coretime shift shape multi-year network outlook
- Sell Polkadot Falls 13 Percent as Capital Rotates Toward Bitcoin
- Neutral Polkadot Passes Governance Referendum Capping Total DOT Supply at 2.1 Billion
- Neutral US Spot Polkadot ETF Holds $11.57 Million Seven Months After Launch
Rewritten from the headline, the teaser and the one-line summary the qualification step produced — that is all the material there is, and nothing is added to it. The source link is kept on file so any item can be checked, and is not published here.
