{
 "tag": "private-key",
 "name": "Private Key",
 "group": "Other",
 "incidents": [
  {
   "slug": "gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026",
   "title": "Knostic: 'gadgethumans-mcp' npm MCP server sends users' raw wallet private key to a remote server",
   "url": "https://drains.watch/i/gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026",
   "json": "https://drains.watch/i/gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026.json",
   "status": "live",
   "severity": "medium",
   "threatStatus": "active",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "The package is an MCP server for AI agents, and it sends the wallet key configured for agent auto-payments to a remote server on each tool call."
   },
   "chains": [
    "base"
   ],
   "method": "key-leak",
   "product": "gadgethumans-mcp (npm)",
   "tags": [
    "base",
    "key-leak",
    "mcp",
    "mcp-server",
    "npm",
    "x402",
    "ai-agent",
    "agent-payments",
    "private-key",
    "ai"
   ],
   "amountUsd": null,
   "victims": null,
   "startedAt": "2026-09-08",
   "closedAt": null,
   "updatedAt": "2026-09-08T12:00:00Z",
   "summary": "Knostic reported on 8 September 2026 that gadgethumans-mcp, an npm MCP server that promises AI agents automatic x402 micropayments, asks users to set a wallet private key but does no local signing. Instead it copies the raw key into a request header and sends it to a remote endpoint on every recognized tool call, which would let whoever receives it take over the wallet. The package had 2,327 downloads in July and August 2026 and was still on npm when the report came out; Knostic found no confirmed thefts. Anyone who set a key in it should move funds and use a fresh, low-balance wallet."
  },
  {
   "slug": "sigma-telegram-bot-wallets-key-leak-200k-may-2026",
   "title": "Trader loses over $200K from two SIGMA Telegram bot wallets in apparent private-key leak",
   "url": "https://drains.watch/i/sigma-telegram-bot-wallets-key-leak-200k-may-2026",
   "json": "https://drains.watch/i/sigma-telegram-bot-wallets-key-leak-200k-may-2026.json",
   "status": "closed",
   "severity": "high",
   "threatStatus": "contained",
   "verification": "verified",
   "chains": [
    "ethereum",
    "base",
    "bsc"
   ],
   "method": "key-leak",
   "product": "SIGMA Telegram trading bot wallets (one trader)",
   "tags": [
    "ethereum",
    "base",
    "bsc",
    "key-leak",
    "sigma",
    "telegram-bot",
    "trading-bot",
    "private-key",
    "fake-captcha"
   ],
   "amountUsd": 200000,
   "victims": 1,
   "startedAt": "2026-05-11",
   "closedAt": "2026-05-11",
   "updatedAt": "2026-05-11T12:00:00Z",
   "summary": "On 11 May 2026 a crypto trader lost over $200,000 across Ethereum, Base and BSC from two wallets created by the SIGMA Telegram trading bot; the largest losses were about $125,000 in POD on Base and $21,000 in FHE on BSC. An on-chain analyst said the drain used the private keys directly, with no token approval involved, while the victim's other wallets were untouched. The cause is unconfirmed; suggestions include fake CAPTCHA bots in Telegram, infostealer malware or a device compromise. Users of bot-generated wallets should keep balances small and never run 'verification' steps a Telegram bot asks for."
  },
  {
   "slug": "latinum-wallet-mcp-pypi-solana-key-exfiltration-mar-2026",
   "title": "Solana wallet MCP server on PyPI sent users' private keys to a remote server",
   "url": "https://drains.watch/i/latinum-wallet-mcp-pypi-solana-key-exfiltration-mar-2026",
   "json": "https://drains.watch/i/latinum-wallet-mcp-pypi-solana-key-exfiltration-mar-2026.json",
   "status": "closed",
   "severity": "medium",
   "threatStatus": "partly-contained",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "The package was an MCP wallet server for AI agents; it auto-registered itself as an MCP server for Claude and sent the Solana private key to a remote server."
   },
   "chains": [
    "solana"
   ],
   "method": "supply-chain",
   "product": "latinum-wallet-mcp (PyPI)",
   "tags": [
    "solana",
    "supply-chain",
    "mcp",
    "mcp-server",
    "pypi",
    "claude",
    "ai-agent",
    "private-key",
    "ai"
   ],
   "amountUsd": null,
   "victims": null,
   "startedAt": "2026-03-31",
   "closedAt": "2026-03-31",
   "updatedAt": "2026-03-31T12:00:00Z",
   "summary": "An advisory published on 31 March 2026 flagged latinum-wallet-mcp, a PyPI package that runs a Solana wallet as an MCP server for AI agents, as malicious. From version 0.0.32 it sent the wallet's private key, along with other metrics, to a remote server during wallet setup, and from 0.0.34 it added itself as an MCP server for Claude on import; none of this was in the public GitHub code. Versions 0.0.32 to 0.0.36 are listed as affected. Anyone who installed them should treat that Solana key as stolen and move funds to a new wallet."
  },
  {
   "slug": "step-finance-treasury-drain-jan-2026",
   "title": "Step Finance treasury wallets drained of about $40M; Solana platform later shuts down",
   "url": "https://drains.watch/i/step-finance-treasury-drain-jan-2026",
   "json": "https://drains.watch/i/step-finance-treasury-drain-jan-2026.json",
   "status": "closed",
   "severity": "critical",
   "threatStatus": "contained",
   "verification": "verified",
   "chains": [
    "solana"
   ],
   "method": "key-leak",
   "product": "Step Finance treasury and fee wallets",
   "tags": [
    "solana",
    "key-leak",
    "treasury",
    "team-wallet",
    "private-key",
    "step-finance",
    "solanafloor",
    "remora",
    "staking"
   ],
   "amountUsd": 40000000,
   "victims": null,
   "startedAt": "2026-01-31",
   "closedAt": "2026-01-31",
   "updatedAt": "2026-02-23T12:00:00Z",
   "summary": "On Jan 31, 2026, Step Finance reported a breach of some of its treasury wallets. CertiK saw 261,854 SOL (about $27 million) unstaked and transferred, and Step later put the total near $40 million. SlowMist's hack database classifies the cause as a private key leak. Step, SolanaFloor and Remora Markets announced a wind-down on Feb 23, 2026, with a STEP buyback based on a pre-hack snapshot and a USDC redemption process for Remora rToken holders. Holders should use only official Step channels for the buyback and redemption."
  },
  {
   "slug": "cursor-contractshark-solidity-extension-dev-key-theft-aug-2025",
   "title": "Malicious 'contractshark.solidity-lang' Cursor extension steals an Ethereum core developer's private key",
   "url": "https://drains.watch/i/cursor-contractshark-solidity-extension-dev-key-theft-aug-2025",
   "json": "https://drains.watch/i/cursor-contractshark-solidity-extension-dev-key-theft-aug-2025.json",
   "status": "closed",
   "severity": "medium",
   "threatStatus": "partly-contained",
   "verification": "verified",
   "ai": {
    "role": "agent-target",
    "note": "The key-stealing extension was installed in Cursor, the AI code editor the developer used as a coding assistant; it read the .env file rather than abusing the AI itself."
   },
   "chains": [
    "ethereum"
   ],
   "method": "supply-chain",
   "product": "Cursor AI code editor users",
   "tags": [
    "ethereum",
    "supply-chain",
    "cursor",
    "ai-code-editor",
    "malicious-extension",
    "solidity",
    "env-file",
    "private-key",
    "developers",
    "ai"
   ],
   "amountUsd": null,
   "victims": 1,
   "startedAt": "2025-08-13",
   "closedAt": "2025-08-13",
   "updatedAt": "2025-08-13T12:00:00Z",
   "summary": "Cointelegraph reported on 13 August 2025 that an Ethereum core developer's hot wallet was drained after he installed 'contractshark.solidity-lang', a fake Solidity extension for the Cursor AI code editor with over 54,000 downloads. The extension read his .env file and sent the private key to the attacker, who waited three days before emptying the wallet. The loss was a few hundred dollars because he kept only test funds there and his main holdings on hardware wallets. Keep keys out of .env files on development machines and use small, separate test wallets."
  }
 ],
 "changes": [
  {
   "incident": "gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026",
   "incidentTitle": "Knostic: 'gadgethumans-mcp' npm MCP server sends users' raw wallet private key to a remote server",
   "severity": "medium",
   "status": "live",
   "threatStatus": "active",
   "date": "2026-09-08",
   "title": "Knostic published its analysis showing the package sends the raw wallet key to a remote endpoint.",
   "sourceUrl": "https://www.knostic.ai/blog/when-auto-signing-sends-your-wallet-private-key-to-a-remote-server-a-malicious-mcp-package-on-npm",
   "url": "https://drains.watch/i/gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026"
  },
  {
   "incident": "gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026",
   "incidentTitle": "Knostic: 'gadgethumans-mcp' npm MCP server sends users' raw wallet private key to a remote server",
   "severity": "medium",
   "status": "live",
   "threatStatus": "active",
   "date": "2026-08-02",
   "title": "Version 1.0.9 of gadgethumans-mcp, one of the versions Knostic analyzed, was published to npm.",
   "sourceUrl": "https://www.knostic.ai/blog/when-auto-signing-sends-your-wallet-private-key-to-a-remote-server-a-malicious-mcp-package-on-npm",
   "url": "https://drains.watch/i/gadgethumans-mcp-npm-sends-wallet-private-key-sep-2026"
  },
  {
   "incident": "sigma-telegram-bot-wallets-key-leak-200k-may-2026",
   "incidentTitle": "Trader loses over $200K from two SIGMA Telegram bot wallets in apparent private-key leak",
   "severity": "high",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2026-05-11",
   "title": "A trader reported two SIGMA-generated wallets drained of over $200,000 on Ethereum, Base and BSC; analysts pointed to a private-key leak.",
   "sourceUrl": "https://www.cryptopolitan.com/crypto-trader-loses-200k-telegram-bot/",
   "url": "https://drains.watch/i/sigma-telegram-bot-wallets-key-leak-200k-may-2026"
  },
  {
   "incident": "latinum-wallet-mcp-pypi-solana-key-exfiltration-mar-2026",
   "incidentTitle": "Solana wallet MCP server on PyPI sent users' private keys to a remote server",
   "severity": "medium",
   "status": "closed",
   "threatStatus": "partly-contained",
   "date": "2026-03-31",
   "title": "Malicious-package advisory MAL-2026-2315 was published for latinum-wallet-mcp versions 0.0.32 to 0.0.36.",
   "sourceUrl": "https://osv.dev/vulnerability/MAL-2026-2315",
   "url": "https://drains.watch/i/latinum-wallet-mcp-pypi-solana-key-exfiltration-mar-2026"
  },
  {
   "incident": "step-finance-treasury-drain-jan-2026",
   "incidentTitle": "Step Finance treasury wallets drained of about $40M; Solana platform later shuts down",
   "severity": "critical",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2026-02-23",
   "title": "Step Finance said it would end operations along with SolanaFloor and Remora Markets after the roughly $40M loss.",
   "sourceUrl": "https://www.theblock.co/post/390964/step-finance-shuts-down",
   "url": "https://drains.watch/i/step-finance-treasury-drain-jan-2026"
  },
  {
   "incident": "step-finance-treasury-drain-jan-2026",
   "incidentTitle": "Step Finance treasury wallets drained of about $40M; Solana platform later shuts down",
   "severity": "critical",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2026-01-31",
   "title": "Step Finance reported a breach of some treasury wallets; CertiK reported 261,854 SOL (about $27M) unstaked and transferred.",
   "sourceUrl": "https://cointelegraph.com/news/step-finance-solanafloor-remora-markets-wind-down-operations",
   "url": "https://drains.watch/i/step-finance-treasury-drain-jan-2026"
  },
  {
   "incident": "cursor-contractshark-solidity-extension-dev-key-theft-aug-2025",
   "incidentTitle": "Malicious 'contractshark.solidity-lang' Cursor extension steals an Ethereum core developer's private key",
   "severity": "medium",
   "status": "closed",
   "threatStatus": "partly-contained",
   "date": "2025-08-13",
   "title": "Cointelegraph reported that a malicious Cursor extension had taken an Ethereum core developer's private key and the hot wallet was drained the previous Sunday.",
   "sourceUrl": "https://cointelegraph.com/news/core-ethereum-devs-crypto-wallet-drained-ai-extension",
   "url": "https://drains.watch/i/cursor-contractshark-solidity-extension-dev-key-theft-aug-2025"
  }
 ]
}