A Chrome extension steals crypto from Raydium swaps .
The extension pretends to be a trading helper for Solana users, letting you execute swaps directly from X posts. On the surface, it looks totally normal: it connects to standard wallets, shows DexScreener price data, and routes swaps through Raydium, Solana’s biggest AMM.
Morning Crypto Report: XRP May Gain $30 Billion in Next 30 Days: Bollinger Bands, Shiba Inu Recovers as $5 Billion Meme Coin, $100,000 BTC Back on RadarCrypto Market Prediction: XRP Rockets 13% on Heavy Multimillion Flow, Ethereum Hit With Mini-Death Cross, Shiba Inu Adds Trillion, What Does It All Mean?The extension quietly attaches a second instruction behind the scenes: a tiny, hidden SOL transfer to the attacker’s personal wallet. You never see it in the UI. Wallets like Phantom only show a summary unless you manually expand the instruction list. So most users never notice an outbound transfer buried inside the same transaction. The fee-extraction code itself is simple: it calculates either a tiny fixed fee or a tiny percentage of the trade, converts it to lamports, and then quietly adds a second instruction to the transaction that sends that amount to the attacker’s wallet. What makes it dangerous is that this logic is buried inside heavily obfuscated JavaScript. On the surface, the UI looks completely legitimate, showing only the expected Raydium swap. The extension also connects to a backend domain with a typo, which records wallet IDs, tracks activity, and pretends to provide “points” and referrals even though the actual website is empty and non-functional. On-chain, the theft looks like tiny, ordinary SOL transfers sitting next to legitimate swaps. Hence, unless someone inspects instructions carefully or knows the attacker’s address, it blends in.. The fee is intentionally small enough to be ignored in the moment.
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Shiba Inu Team Sends 'Unstoppable' Tweet as Volatility Rocks MarketThe official Shiba Inu X account has sent out a tweet to the SHIB community as uncertainty weighs on the broader crypto market.
Read more »
Real estate agent fired after boss sends her a ‘drunk’ late-night textToday's Video Headlines: 11/24/25
Read more »
Man Accused of Killing Sex Offender Granted Plea Extension Due to Mental Health ConcernsVarun Suresh, accused of fatally stabbing David Brimmer, a registered sex offender, was granted a plea extension in court. The suspect allegedly used the Megan's Law website to track Brimmer and planned the killing, citing mental health issues as a defense. The incident involved multiple stab wounds and a pre-planned plot targeting sex offenders, with Suresh reportedly admitting to the crime and expressing his dislike for pedophiles. Further court proceedings are scheduled for December 17.
Read more »
San Francisco Tech Investor Robbed of $11 Million in Crypto in Targeted Home InvasionA tech investor's home was the target of a brazen $11 million crypto heist in San Francisco. The incident, involving an armed assailant posing as a delivery worker, highlights the increasing vulnerability of high-profile crypto holders and the risks associated with self-custody of digital assets. The victim, who shares a home with the ex-partner of OpenAI CEO Sam Altman, was tied up, tortured, and had their crypto wallets drained. Police are investigating, and the case has sparked concerns about the safety and security of the tech and crypto community.
Read more »
Top Crypto Gainers: Kaspa, Ethena, Quant lead crypto marketKaspa (KAS) emerged as one of the major gainers among the top 100 cryptocurrencies on Tuesday. The token is up about 13% over the past 24 hours, flipping its weekly loss to a 12% gain.
Read more »
ChatGPT and Copilot are being booted out of WhatsAppThe Meta messaging app’s new terms prohibit rival AI chatbots, meaning ChatGPT, Copilot, and others are leaving WhatsApp.
Read more »