Privy
1 incident, 1 live. 14 days since the last new one.
1 drains in the last 12 months
1 drains in the last 12 months
1 drains in the last 12 months
1 drains in 2026
1 drains in 2026
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½
Less More
Live
-
Medium✕Still active
Fake 'human verification' bookmarklet hijacks Fomo account, drains about $48K from embedded wallet
A Fomo user clicked a project website link on a token page and landed on a phishing site that asked them to drag an icon to the bookmarks bar and click it three times as a 'human verification'. The bookmark ran on the logged-in Fomo page and took the Privy login tokens and wallet data from browser storage, and about $48,000 (mostly USDC) was moved out. The victim never connected a wallet, signed anything or typed a seed phrase, and had no two-factor login enabled. Fomo users who ran any such bookmark should revoke sessions from a trusted device, turn on MFA and move funds.
Fomo web app users (Privy embedded wallets)·Solana·$48K stolen·Since Oct 8, 2026·
No drains match these filters.