Beware! Hidden Chrome Extension Stealing from Your Solana Swaps Like a Sneaky Thief

by

Well, well, well… Looks like someone’s been doing a little sleight of hand with your Solana swaps. 🙄 A totally innocent Google Chrome extension has decided to make itself at home in your browser, and it’s now quietly siphoning off a tiny (but still annoying) fee from every swap. How? By slipping an extra transfer into your transactions and sneaking it into the creator’s wallet. 🙃

According to the ever-watchful cybersecurity gurus at Socket, this little culprit goes by the name of Crypto Copilot. It lets users trade Solana (SOL) right from their oh-so-convenient X social media feed. But don’t get too comfy-Crypto Copilot isn’t your friendly neighborhood trading tool. Nope, it has a hidden agenda: skimming at least 0.0013 SOL (that’s 0.05% of your trade) every time you make a swap. Just a small amount? Sure, but it adds up. 😈

//s3.cointelegraph.com/uploads/2025-11/019ac574-8706-7e89-9ae6-050b9ca31b7b”/>

Who’s Behind This Nefarious Plot?

Apparently, this sneaky extension has been around for a while. It was published on June 18, 2024, and despite being super shady, it still only has 15 users (lucky 15). A takedown request has been submitted, but it’s unclear when that’ll actually happen. Don’t hold your breath. 😬

Crypto Copilot markets itself as an ultra-convenient tool for Solana traders. It promises to let you trade instantly without the hassle of jumping between apps or platforms. Because who has time for actual security when you can trade with a click, right? 🤡

And It’s Not the First Time…

If you thought this was a one-off, think again. Google Chrome’s extension ecosystem has been a magnet for crypto scammers. Just this month, Socket warned that the fourth-most-popular crypto wallet extension in the Chrome Web Store was draining user funds. And remember when Jupiter, the decentralized exchange aggregator, identified another malicious Chrome extension that was plundering Solana wallets? No? Well, now you do.

And let’s not forget the tragedy of June 2024, when a poor Chinese trader lost $1 million after installing the Aggr Chrome plugin. This lovely extension didn’t just steal a few bucks; it hijacked accounts by stealing browser cookies-hello, Binance account! 🙄

So, moral of the story? If you’re installing random Chrome extensions, maybe give them a second glance… or twenty. Because apparently, some of them are too convenient for comfort. 🙃

Read More

2025-11-27 18:06