A 20-month Polkadot wallet breach reveals the dark side of faster crypto withdrawals

Polkadot's Fearless Wallet security breach has exposed a potential weakness in the network's recently shortened staking withdrawal period. The Polkadot Community Foundation warned on Oct. 21 that the third-party Fearless Wallet browser extension had been leaking users' private keys since February 2025, potentially exposing their assets to unauthorized transfers. The disclosure followed an investigation by the Polkadot Technical Fellowship, which identified malicious code capable of extracting wallet credentials. The foundation urged affected users to generate new private keys using another wallet and move their remaining funds immediately. The breach has also raised questions about a July network upgrade that reduced the time needed to unstake DOT from as long as 28 days to approximately one or two days.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to CryptoSlate.