{
 "tag": "phantom",
 "name": "Phantom",
 "group": "Wallets & apps",
 "incidents": [
  {
   "slug": "openclaw-clawhub-malicious-skills-solana-phantom-feb-2026",
   "title": "Malicious OpenClaw AI-agent skills pose as Solana and Phantom tools to steal wallet keys",
   "url": "https://drains.watch/i/openclaw-clawhub-malicious-skills-solana-phantom-feb-2026",
   "json": "https://drains.watch/i/openclaw-clawhub-malicious-skills-solana-phantom-feb-2026.json",
   "status": "live",
   "severity": "high",
   "threatStatus": "partly-contained",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "Malicious skills for the OpenClaw AI agent posed as Solana, Phantom and other crypto tools; some delivered the AMOS stealer and Solana keys were exposed in plain-text keypair files."
   },
   "chains": [
    "solana",
    "multi-evm"
   ],
   "method": "supply-chain",
   "product": "OpenClaw (ClawHub) skill users",
   "tags": [
    "solana",
    "multi-evm",
    "supply-chain",
    "openclaw",
    "clawhub",
    "ai-agent",
    "skills",
    "amos-stealer",
    "macos",
    "infostealer",
    "phantom",
    "ai"
   ],
   "amountUsd": null,
   "victims": null,
   "startedAt": "2026-02-05",
   "closedAt": null,
   "updatedAt": "2026-10-22T21:53:35.016Z",
   "summary": "Bitdefender found that about 17% of the OpenClaw (ClawHub) AI-agent skills it analyzed in the first week of February 2026 behaved maliciously. Solana-themed skills made up 9.3% of the malicious set and Phantom-wallet skills 8.2%. Some skills told users to run fake installers that dropped the AMOS macOS stealer. Solana skills that read SOLANA_KEYPAIR_PATH can expose the plain-text keypair file that holds a wallet's private key. Payloads were staged on 91.92.242[.]30 and an impersonated OpenClaw GitHub repo. Anyone who installed crypto skills and ran their setup commands should move funds to a new wallet."
  },
  {
   "slug": "solana-owner-permission-phishing-3m-dec-2025",
   "title": "Solana owner-permission phishing: OKX Wallet and Phantom add warnings after $3M loss",
   "url": "https://drains.watch/i/solana-owner-permission-phishing-3m-dec-2025",
   "json": "https://drains.watch/i/solana-owner-permission-phishing-3m-dec-2025.json",
   "status": "live",
   "severity": "critical",
   "threatStatus": "partly-contained",
   "verification": "verified",
   "chains": [
    "solana"
   ],
   "method": "token-owner-swap",
   "product": "Solana wallet user (single victim)",
   "tags": [
    "solana",
    "token-owner-swap",
    "owner-permission",
    "assign",
    "setauthority",
    "simulation-blind-spot",
    "okx-wallet",
    "phantom",
    "slowmist",
    "signature-phishing",
    "account-takeover",
    "misttrack",
    "whale"
   ],
   "amountUsd": 3000000,
   "victims": 1,
   "startedAt": "2025-12-05",
   "closedAt": null,
   "updatedAt": "2026-10-22T20:36:38.517Z",
   "summary": "A Solana wallet user signed a transaction from a disguised tool site that showed no balance change but moved the account's Owner permission to an attacker address starting GKJBEL. SlowMist reported over $3M lost, with about $2M in DeFi positions later recovered with protocol help. On 7 Jan 2026 OKX Wallet warned the technique was spreading across Solana, said it had added pre-signing warnings, and said Phantom had added similar alerts. Before signing, check for any instruction that changes an account owner or authority; normal wallets never ask you to change your own account's owner."
  },
  {
   "slug": "solana-address-poisoning-wave-2025-2026",
   "title": "Address poisoning hit nearly 4.5M Solana wallets; 1,104 sent $940K to lookalike addresses",
   "url": "https://drains.watch/i/solana-address-poisoning-wave-2025-2026",
   "json": "https://drains.watch/i/solana-address-poisoning-wave-2025-2026.json",
   "status": "live",
   "severity": "critical",
   "threatStatus": "active",
   "verification": "verified",
   "chains": [
    "solana"
   ],
   "method": "address-poisoning",
   "product": "Solana wallet users sending to exchange deposit addresses",
   "tags": [
    "solana",
    "address-poisoning",
    "dusting",
    "usdt",
    "usdc",
    "phantom",
    "exchange-deposit",
    "bitquery"
   ],
   "amountUsd": 940106,
   "victims": 1104,
   "startedAt": "2025-11-17",
   "closedAt": null,
   "updatedAt": "2026-10-12T12:00:00Z",
   "summary": "Bitquery data reported by CryptoSlate shows scammers sent tiny 'dust' transfers from lookalike addresses to 4,497,798 Solana wallets between Oct 30, 2025 and Oct 7, 2026, betting that victims would later copy the fake address from their history. In a studied subset of poisoned wallets, 1,104 wallets paid a combined $940,106 to lookalikes, a figure the researchers call a floor. Receiving dust cannot drain a wallet; the loss happens only when you send to the wrong address. Copy addresses from your exchange's deposit page or a saved contact, never from transaction history."
  }
 ],
 "changes": [
  {
   "incident": "solana-address-poisoning-wave-2025-2026",
   "incidentTitle": "Address poisoning hit nearly 4.5M Solana wallets; 1,104 sent $940K to lookalike addresses",
   "severity": "critical",
   "status": "live",
   "threatStatus": "active",
   "date": "2026-10-12",
   "title": "CryptoSlate reported that 1,104 wallets in a studied subset paid $940,106 to poisoned addresses, described as a minimum.",
   "sourceUrl": "https://cryptoslate.com/?p=571247",
   "url": "https://drains.watch/i/solana-address-poisoning-wave-2025-2026"
  },
  {
   "incident": "solana-address-poisoning-wave-2025-2026",
   "incidentTitle": "Address poisoning hit nearly 4.5M Solana wallets; 1,104 sent $940K to lookalike addresses",
   "severity": "critical",
   "status": "live",
   "threatStatus": "active",
   "date": "2026-10-09",
   "title": "Bitquery published findings that 4,497,798 Solana wallets were targeted with lookalike addresses over about 11 months.",
   "sourceUrl": "https://cryptoslate.com/?p=571247",
   "url": "https://drains.watch/i/solana-address-poisoning-wave-2025-2026"
  },
  {
   "incident": "openclaw-clawhub-malicious-skills-solana-phantom-feb-2026",
   "incidentTitle": "Malicious OpenClaw AI-agent skills pose as Solana and Phantom tools to steal wallet keys",
   "severity": "high",
   "status": "live",
   "threatStatus": "partly-contained",
   "date": "2026-02-05",
   "title": "Bitdefender Labs published its analysis of malicious OpenClaw skills, including Solana- and Phantom-themed lures that delivered the AMOS stealer.",
   "sourceUrl": "https://www.bitdefender.com/en-au/blog/labs/helpful-skills-or-hidden-payloads-bitdefender-labs-dives-deep-into-the-openclaw-malicious-skill-trap",
   "url": "https://drains.watch/i/openclaw-clawhub-malicious-skills-solana-phantom-feb-2026"
  },
  {
   "incident": "solana-owner-permission-phishing-3m-dec-2025",
   "incidentTitle": "Solana owner-permission phishing: OKX Wallet and Phantom add warnings after $3M loss",
   "severity": "critical",
   "status": "live",
   "threatStatus": "partly-contained",
   "date": "2026-01-07",
   "title": "OKX Wallet warns the owner-modification phishing technique is spreading on Solana and says it has added warnings; Phantom reportedly added similar alerts.",
   "sourceUrl": "https://coinfomania.com/okx-wallet-warns-of-new-phishing-scam-targeting-solana-users/",
   "url": "https://drains.watch/i/solana-owner-permission-phishing-3m-dec-2025"
  },
  {
   "incident": "solana-owner-permission-phishing-3m-dec-2025",
   "incidentTitle": "Solana owner-permission phishing: OKX Wallet and Phantom add warnings after $3M loss",
   "severity": "critical",
   "status": "live",
   "threatStatus": "partly-contained",
   "date": "2025-12-05",
   "title": "SlowMist warns that a Solana phishing signature moved a victim's account Owner permission to an attacker, with over $3M lost.",
   "sourceUrl": "https://x.com/SlowMist_Team/status/1996528328061382860",
   "url": "https://drains.watch/i/solana-owner-permission-phishing-3m-dec-2025"
  },
  {
   "incident": "solana-owner-permission-phishing-3m-dec-2025",
   "incidentTitle": "Solana owner-permission phishing: OKX Wallet and Phantom add warnings after $3M loss",
   "severity": "critical",
   "status": "live",
   "threatStatus": "partly-contained",
   "date": "2025-12-05",
   "title": "Coinpaper, citing SlowMist, reported a Solana user lost over $3M after a deceptive signature changed the wallet's Owner permission; protocol teams helped recover about $2M in DeFi assets.",
   "sourceUrl": "https://coinpaper.com/12892/solana-user-loses-3-m-as-hidden-wallet-permissions-exploited",
   "url": "https://drains.watch/i/solana-owner-permission-phishing-3m-dec-2025"
  },
  {
   "incident": "solana-address-poisoning-wave-2025-2026",
   "incidentTitle": "Address poisoning hit nearly 4.5M Solana wallets; 1,104 sent $940K to lookalike addresses",
   "severity": "critical",
   "status": "live",
   "threatStatus": "active",
   "date": "2025-11-17",
   "title": "A Solana wallet sent a $10 USDT test to its Gate.io deposit address; 12 seconds later a lookalike sent dust, and the wallet then sent 30,749.80 USDT to the lookalike.",
   "sourceUrl": "https://cryptoslate.com/?p=571247",
   "url": "https://drains.watch/i/solana-address-poisoning-wave-2025-2026"
  }
 ]
}