Today is my last day at @phantom.
I joined 4 years ago when we sat in the Solana office, and leave as the #1 wallet.
Phantom is the best team in crypto, leading the fight for self-custody. I’m so grateful to @BChillman, @fragosti, and CK for letting me be a part of the journey.
If you're running AI trading agents on Solana and your current setup involves exporting a private key from Phantom into a .env file... we're building something for you.
👉DM me if you want in
Brian Friel retweeted
Today @phantom received first-of-its-kind no-action relief from the @CFTC. We can now connect users to regulated derivatives markets and event contracts without registering as an introducing broker.
phantom.com/learn/blog/phant…
Paycheck deposit to $CASH has been achieved internally
Brian Friel retweeted
Phantom is not at risk. We have confirmed Phantom does not use any vulnerable versions of the affected packages.
We take a number of steps to guard against these types of attacks, including:
- Strict version pinning for all dependencies, preventing automatic updates to potentially compromised packages
- Mandatory security reviews for all package upgrades before integration
- Multi-layered dependency scanning and vulnerability monitoring
- Isolated build environments with integrity verification
We take the security of our users and their funds extremely seriously and will continue investing in our security practices to keep them safe against evolving threats like this one. xitter.cf/P3b7_/status/196509484…
🚨 There’s a large-scale supply chain attack in progress: the NPM account of a reputable developer has been compromised. The affected packages have already been downloaded over 1 billion times, meaning the entire JavaScript ecosystem may be at risk.
The malicious payload works by silently swapping crypto addresses on the fly to steal funds.
If you use a hardware wallet, pay attention to every transaction before signing and you're safe.
If you don’t use a hardware wallet, refrain from making any on-chain transactions for now.
It’s still unclear whether the attacker is also stealing seeds from software wallets directly at this stage.
Excellent report here: jdstaerk.substack.com/p/we-j…
Excited for what we’re shipping @phantom
If you’re in Denver, go listen to @jorge_sfo . He is the architect behind our chain expansion efforts and one of my favorite people to work with
Fireside: The Future of Wallets 🔥
Join @miamislice (Product Lead @MetaMask), @jorge_sfo (Chain Expansion Tech Lead @phantom), & @pedrouid (Founder & Director @WalletConnect Foundation) as they discuss security, UX & mass adoption of web3 wallets
walletcon.com/
Thank you for having us! 🦔
Ep. 35: @phantom 💜
🟣 Monad = Fast
🟣 Upcoming Testnet Experience
🟣 Onboarding New Crypto Users
@BChillman <> @bfriel_ <> @keoneHD <> @intern <> @opendanny
Brian Friel retweeted
Phantom is not impacted by this vulnerability.
Our Security Team confirms that we have never used the exploited versions of @solana/web3.js
anyone using @solana/web3.js, versions 1.95.6 and 1.95.7 are compromised with a secret stealer leaking private keys. if you or your product are using these versions, upgrade to 1.95.8 (1.95.5 is unaffected)
if you run a service that can blacklist addresses, do your thing with FnvLGtucz4E1ppJHRTev6Qv4X7g8Pw6WPStHCcbAKbfx
