TLDR Tech / Crypto
Squads Discloses Address Poisoning Attack on Solana Multisig Users
Squads disclosed an address poisoning campaign targeting Solana multisig users, where attackers grind public keys to match the first and last characters of real vault addresses and create fake multisig accounts seeded with legitimate users as members to make them appear authentic in the UI. The attack carries no protocol-level risk and exposes no funds, as the vector relies entirely on users copying a spoofed vault address or cosigning an unsolicited transaction. Squads is shipping UI mitigations, including alert banners for unfamiliar multisigs and a whitelist system that places newly added accounts in a pending state requiring manual approval before use.
Read the full story