Solana: Slope users and users who have imported mnemonics into Slope may still be at risk of theft

Solana released an update on the Slope wallet incident on August 2, stating that the affected addresses appear to have been created, imported, or used in Slope wallets on iOS and Android, and the private key information of these Slope users was inadvertently transmitted to the application monitoring service by Slope. But how the hackers obtained or intercepted the information is still under investigation. This attack did not involve core code related to Solana Labs, the Solana Foundation, or anything related to the Solana protocol itself. It is not a protocol-level vulnerability. The affected users on other software wallets (such as Phantom and Solflare) may be users reused in Slope The result of mnemonic phrases generated or stored in . It is currently not officially believed to be an issue directly related to any specific wallet implementation other than Slope. Since both Ethereum and Solana use BIP39 mnemonics, any impact on users using Ethereum wallets may also be due to the reuse of mnemonics. Any wallets generated from mnemonics that have never been imported (or used by Slope wallets) are not affected, however users are at risk of attack as long as they import their mnemonic into the Slope app. In addition, Solana officials also emphasized that users of Slope wallets or users who have previously imported mnemonics into Slope, even if no assets are transferred, the wallet may be stolen, and users should not reuse mnemonics previously used in the Slope mobile application Word derived wallet.