HashDit | now with Pro Extension

This account is verified. Learn more

@HashDit

Web3 Security Firm - Defending against Hacks & Scams on #BSC & More! 🛡️
Users stay safe with our Chrome Extension & Metamask Snaps! ⚙️
Links below 👇

linktr.ee/hashdit Joined January 2022

85 Following 6.6K Followers 1.2K Posts

Latest posts 5

Pinned post

HashDit | now with Pro Extension @HashDit Sep 17, 2025

BREAKING: Introducing our latest "HashDit Pro" Chrome Extension🎉🥳

The latest Extension will offer :
🔹 Powered up Threat Protection (stay SECURED against address poisoning / drainer + any other phishing attacks)
🔹 Smart Contract Simulation (preview balance changes and approval changes)
🔹 Supporting 7 popular wallets + all EVM chains
🔹 Website checker (Clear pop-up warning when visiting malicious websites)

🤔 What you should do if you are using the old Extension? Remove the old Extension and install our latest Extension for continuous improved protection!

Download here NOW for FREE: chromewebstore.google.com/detail/hjplojc…

Stay safe with HashDit Pro! 🛡️

HashDit | now with Pro Extension @HashDit Oct 29

🚨 HashDit Alert! 🚨

Polymarket users are reporting unauthorized withdrawals and a possible frontend compromise, according to @AggrNews citing Discord reports.

A frontend injection attack is suspected, the mechanism remains unconfirmed.

As a precaution, pause interactions with the site and avoid signing transactions or approvals until official clarification.

Stay safe!

HashDit | now with Pro Extension @HashDit Oct 28

🚨 HashDit Summary: Last 24h in Crypto Security

• @solflare's staking provider had a validator key issue, impacting reward production x.com/solflare/statu…
• @predictdotfun was compromised, leading to ~400K USDT in user losses via a third-party hosted API docs site x.com/predictdotfun/…
• @coinbase disclosed a vendor incident involving Amplitude that affected data of ~70K users.x.com/CoinbaseSuppor…
• @FoundationHQ and @KeystoneWallet hardware wallets suffered customer data breaches x.com/FoundationHQ/s…
x.com/KeystoneWallet…

Attackers are increasingly targeting vendors and supply chains. Platforms need to audit third parties closely and revoke access at the first red flag; users should minimize shared data and reduce exposure.

Stay safe!

Solflare - The Solana Wallet Verified account @solflare Oct 27

Update on Solflare SOL staking

Our staking provider has notified us of a security incident on their side, affecting the keys they hold for the Solflare validator. They are investigating. As a result, the Solflare validator is currently not producing rewards.

Your SOL is safe. Delegated stake sits in your own stake account and is controlled by your keys alone; the Solana protocol does not allow a validator, or anyone holding its keys, to move it. No user funds were touched.

We're moving to a new Solflare validator, which means your stake will need to move too. No action is needed now: an upcoming app update will give you a secure, guided path to the new validator, and we'll post here the moment it's live. Rewards are paused until your stake is active on the new validator, and we're working on a compensation plan for everyone who migrates.

Migration will only happen through the Solflare app. We will never DM you or send you a link. We'll keep you posted.
View quoted post on X

HashDit | now with Pro Extension @HashDit Oct 22

🚨 HashDit Alert! 🚨

Fearless Wallet extension versions 3.0.1, 3.0.3, 3.0.4, and 3.0.5 contained malicious code that could exfiltrate private keys when users unlocked the wallet.

Confirmed on Chrome; Firefox users during the same period should also treat keys as compromised. So far, 8 users have reported unauthorized transactions totaling 17,286 DOT.

If affected, assume compromise and move funds to a new wallet immediately.

Stay safe!

Polkadot Verified account @Polkadot Oct 21

Security Alert for Fearless Wallet

Fearless Wallet is a third-party application, built and maintained by an independent team.

Following an investigation by the Polkadot Technical Fellowship on behalf of the @PCF_org, it was found that the Fearless Wallet browser extension had been compromised and had been leaking users’ private keys since February 2025.

If you have used the Fearless Wallet browser extension, please create a new keypair with a different wallet and move your funds as soon as possible.

Remember to never share your private keys.
View quoted post on X

HashDit | now with Pro Extension @HashDit Oct 22

According to @spreekaway , @swellnetworkio has been breached and could potentially be linked to the Railway incident.

Stay safe!
x.com/spreekaway/sta…

HashDit | now with Pro Extension Verified account @HashDit Oct 22

🚨 HashDit Alert! 🚨

@Railway detected unauthorized access to systems storing customer environment variables. An attacker may have obtained some encrypted env vars and their decrypted contents (API keys, DB credentials, private registry credentials, private keys, etc.).

Immediate actions recommended for all users (especially crypto teams):

1. Rotate/roll all environment variables and secrets stored in Railway right away.
2. For crypto: treat any private key that was in Railway as compromised! Migrate funds/roles to new keys rather than just rotating in place.
3. Rotate any related private registry credentials.
4. Review service logs for unusual activity.

This appears to be part of a broader series of attacks on platform companies (primarily aimed at compromising AI inference providers). Crypto projects are also heavily affected/at risk, especially any that stored private keys, wallet keys, or signer credentials in Railway env vars.
View quoted post on X