#solflare — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #solflare, aggregated by home.social.
-
Update: Solflare “xpass exploit" Details Released
In Feb 2025, I reported an exploit vulnerability in the Solflare Chrome wallet which allowed the wallet vault (solflaredata) to be decrypted without the user's password.
Turns out, this was a backdoor, not a bug.
Today, I am releasing the full details of the xpass exploit, aka the "backdoor master key".
https://forum.hashpwn.net/post/11116
#solflare #crypto #wallet #vulnerability #exploit #backdoor #xpass #cyclone #hashpwn #news #infosec #cybersecurity
-
During a recent audit of the Solflare Crypto Wallet browser extension, I came across a major vulnerability that allows the encrypted seed phrase and private keys to be instantly recovered -- without requiring the wallet password to decrypt them.