Fearless Wallet Browser Extension Leaks Private Keys
Fearless Wallet browser extension leaked private keys, compromising user accounts
A security notice has been issued regarding the Fearless Wallet browser extension, which has been found to leak private keys, potentially compromising user accounts. According to the Polkadot Forum, users who have used the extension since February 2025 should assume that their accounts are compromised and take immediate action to secure their funds.
What happened
The issue affects versions 3.0.1, 3.0.3, 3.0.4, and 3.0.5 of the Fearless Wallet browser extension, which contained offending code that sent private keys to a server run by the attacker when the wallet was unlocked. The code was active between February 2025 and October 10, 2026, and could be enabled again at any point in time.
What to do now
Users who believe they are impacted should create a new keypair in a different well-maintained wallet, move their funds to the new account, and remove the Fearless Wallet extension. It is also recommended to transition to a well-maintained mobile wallet if using the Fearless mobile app.
Warning signs
Users should be aware of warning signs that their account may be under attack, such as unexpected changes to their staking or nomination pool settings, or small test transfers leaving their account. If any of these signs are noticed, users should move their funds immediately and contact PAPI Rescue for assistance.