Jupiter Alerts Users to New Solana Wallet Scam

Jupiter, a decentralized exchange aggregator, has issued a warning about a new fraudulent browser extension that targets Solana users.

The extension, known as “Bull Checker,” poses as a tool to view memecoin holders but secretly steals funds from users’ wallets.

According to Jupiter’s research released on August 20, this malicious extension, available on Google Chrome, was designed to bypass detection. Once installed, it manipulates transactions to redirect funds from users’ wallets while appearing legitimate.

The extension’s request for extensive permissions, including “read and write” access, is a major red flag, as legitimate tools typically require only “read-only” permissions. Despite this warning, many users continued to use the extension, leading to stolen funds.

Jupiter confirmed that major Solana DApps and wallets are not compromised. This discovery comes in the wake of a $1 million exploit at the Cypher Protocol and a separate incident where over $100,000 was stolen from a Phantom Wallet during a presale event.