Jupiter, a decentralized exchange aggregator, has issued a warning about a new fraudulent browser extension that targets Solana users.
The extension, known as “Bull Checker,” poses as a tool to view memecoin holders but secretly steals funds from users’ wallets.
According to Jupiter’s research released on August 20, this malicious extension, available on Google Chrome, was designed to bypass detection. Once installed, it manipulates transactions to redirect funds from users’ wallets while appearing legitimate.
The extension’s request for extensive permissions, including “read and write” access, is a major red flag, as legitimate tools typically require only “read-only” permissions. Despite this warning, many users continued to use the extension, leading to stolen funds.
Jupiter confirmed that major Solana DApps and wallets are not compromised. This discovery comes in the wake of a $1 million exploit at the Cypher Protocol and a separate incident where over $100,000 was stolen from a Phantom Wallet during a presale event.
The U.S. Securities and Exchange Commission (SEC) has filed emergency enforcement actions against First Liberty Building & Loan, LLC and its founder, Edwin Brant Frost IV, alleging they operated a $140 million Ponzi scheme that spanned more than a decade and defrauded around 300 investors.
A legal clash between Coin Center and the U.S. Treasury Department over sanctions imposed on Tornado Cash has officially come to an end, following a joint decision to dismiss the case.
A sophisticated cyberattack targeting Brazil’s central bank reserve accounts has resulted in the theft of over $140 million (R$800 million), much of which was swiftly funneled through cryptocurrency channels.
A malicious open-source project on GitHub disguised as a Solana trading bot has compromised user wallets, according to a July 2, 2025, report by cybersecurity firm SlowMist.