Polkadot Foundation Flags Malicious Code in Four Fearless Extension Versions

Polkadot Foundation warned Fearless wallet users that four browser-extension releases contain malicious code that may expose private keys, putting accounts used with the affected versions at risk. The affected releases are versions 3.0.1, 3.0.3, 3.0.4 and 3.0.5. When a user unlocks a wallet, the code may send its private key to an attacker-controlled server. The code was active at different times from February 2025 through Oct. 10, 2026. Eight users have reported unauthorized transactions that may be connected to the issue, involving 17,286 Polkadot (DOT).

Source: TokenPost