


Perceptive Security
SOC/SIEM Consultancy

Chrome Extension Caught Injecting Hidden Solana Transfer Fees Into Raydium Swaps
Published:
26 november 2025 om 11:10:00
Alert date:
5 december 2025 om 08:03:22
Source:
thehackernews.com

Cybersecurity researchers discovered a malicious Chrome extension called 'Crypto Copilot' that injects hidden Solana transfer fees into Raydium swap transactions. The extension, published by user 'sjclark76' on May 7, 2024, steals cryptocurrency by redirecting funds to attacker-controlled wallets. This represents a supply chain attack targeting cryptocurrency users through a compromised browser extension on the Chrome Web Store.
Technical details
Mitigation steps:
Affected products:
Chrome Web Store
Raydium
Solana
Related links:
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.