Fearless Wallet Extension May Expose Keys as Users Report 17,286 DOT Lost

The Polkadot Community Foundation warned that four Fearless Wallet browser-extension versions contain malicious code that can send users’ private keys to an attacker when they unlock a wallet, putting accounts used with those releases at risk. The affected releases are 3.0.1, 3.0.3, 3.0.4 and 3.0.5. The code was active during different periods between February 2025 and Oct. 10, 2026, the foundation said. Eight users have reported unauthorized transactions that may be connected to the issue, involving 17,286 DOT.