Solana wallet MCP server on PyPI sent users' private keys to a remote server
latinum-wallet-mcp (PyPI)
An advisory published on 31 March 2026 flagged latinum-wallet-mcp, a PyPI package that runs a Solana wallet as an MCP server for AI agents, as malicious. From version 0.0.32 it sent the wallet's private key, along with other metrics, to a remote server during wallet setup, and from 0.0.34 it added itself as an MCP server for Claude on import; none of this was in the public GitHub code. Versions 0.0.32 to 0.0.36 are listed as affected. Anyone who installed them should treat that Solana key as stolen and move funds to a new wallet.
Why this severity: Only partly contained, a narrower target.
AI involvement
AI agents as the target. The package was an MCP wallet server for AI agents; it auto-registered itself as an MCP server for Claude and sent the Solana private key to a remote server.
Give agents a small, capped wallet with allow-listed destinations, and never let an agent that can sign read untrusted content.
- Started
- Mar 31, 2026
- Closed
- Mar 31, 2026
- Chains
- Solana
- Method
- Supply-chain stealers
Indicators · never visit or send to these
- facilitator.latinum[.]ai
What to do now
- Treat that Solana private key as stolen and move funds to a new wallet created elsewhere.
- Uninstall the package and remove it from your Claude MCP configuration.
Stay safe
Am I affected?
You are affected if you installed latinum-wallet-mcp 0.0.32 to 0.0.36 from PyPI and set up its Solana wallet, or if it appeared in your Claude MCP settings.
What to do now
- Treat that Solana private key as stolen and move funds to a new wallet created elsewhere.
- Uninstall the package and remove it from your Claude MCP configuration.
How to avoid this
- Give MCP wallet servers only a small, capped wallet made just for that agent.
- Use MCP servers whose published package matches the public source, and pin versions.
- Prefer servers that sign locally or through a signer with spending limits; never one that sends the raw key anywhere.
Timeline 1
Malicious-package advisory MAL-2026-2315 was published for latinum-wallet-mcp versions 0.0.32 to 0.0.36.
Source
Alerts & on-chain evidence 1
How this method works
A popular code package or app update is hijacked to steal wallet keys or swap addresses, hitting everyone who installs it. Read about supply-chain stealers →
Follow new drains and updates in your feed reader or Telegram RSS bot.