- Scam type: Hack
- Project or site name: Fearless Wallet browser extension
- Incident date: 2025-02-26
- Reported: 2026-10-22
- Last updated: 2026-10-22
The Fearless Wallet browser extension, a third-party Polkadot wallet, contained code that sent users' recovery phrases, keystore files and wallet passwords to tonscanner[.]org when they unlocked the wallet. SlowMist puts the exposure period at February 2025 to October 2026. This report lists the exfiltration domain and the Chrome extension ID that SlowMist flags as malicious. No attacker crypto addresses have been published. Sources: Polkadot on X, 2026-10-21 14:13 UTC (https://x.com/Polkadot/status/2112910039207800970), says an investigation by the Polkadot Technical Fellowship for the…
Websites in this report: tonscanner.org