Update:

As we work to complete the forensic investigation of yesterday's breach together with our auditing partner SlowMist_Team & osec_io, we’re calling for the support of the broader community to help us trace & flag attacker wallets & ultimately recover funds.

Attackers interacted from binance to:
HYaQcKPcWgLe7gpA99EUbDSGuzJCupNVCRXmXP37xYXv

Htp9MGP8Tig923ZFY7Qf2zzbMUmYneFRAhSp7vSg4wxV

CEzN7mqP9xoxn2HdyW6fjEJ73t7qaX9Rp2zyS6hb3iEu

5WwBYgQG6BdErM2nNNyUmQXfcUnB68b6kesxBywh1J3n

GeEccGJ9BEzVbVor1njkBCCiqXJbXVeDHaXDCrBDbmuy

Please keep an eye on our official Twitter updates, all questions and enquiries regarding individual cases will be answered via official announcement.

Additional information:

The server-side logging was removed as soon as the vulnerability was discovered.

At this moment, 1444 of the 9223 (15%) wallets affected could potentially be traced back to this vulnerability.

Continued ⬇️
https://twitter.com/osec_io/status/1555087555351420928

We are working together with our auditing partners and the Solana foundation to uncover any potential additional attack vectors.

Relevant law enforcement agencies have been informed in order to proceed with criminal investigations against the attackers.

Nevertheless, until the root cause is found, we invite all Slope users to create a new seed phrase in a new wallet.

Updates will be shared as the investigation in both the root causes and the asset recovery proceed.

A huge thank you to osec_io for their contribution so far!

Slope Community Update - August 5, 2022

Hackers - please see below for our bounty offer in return for the safe return of our users' assets.

Wallet address: DyQ96GwjkHkGSzYEB4NaPk2NxsXyRTMNHKJQd3fziABf

Our team is still investigating the incident and working with law enforcement to identify the hacker and recover funds.

No matter the case, we're planning to do everything we can to make our users whole. We're in ongoing discussions directly with Solana around how to collaborate towards making this happen.

We have also patched the suspected vulnerability in our product, and are working to re-ensure full security.

It will take some time for us to sort through everything, but we will be back as soon as we can with further statements and recourses.

Slope Community Update - August 8, 2022

Slope Update - 12 Aug
▪️ Our auditors osec_io & SlowMist_Team will publish their audit results today. We will link the reports when they're made public
▪️ Huge thank you to the Solrazr_App team for forwarding a very meaningful clue towards further tracing the hacker addresses

🚨𝐒𝐩𝐚𝐦 𝐖𝐚𝐫𝐧𝐢𝐧𝐠🚨


Hello everyone. Please be aware that some Slope communities are bogus. ‼️𝐏𝐥𝐞𝐚𝐬𝐞 𝐤𝐞𝐞𝐩 𝐢𝐧 𝐦𝐢𝐧𝐝 𝐭𝐡𝐚𝐭 𝐒𝐥𝐨𝐩𝐞 𝐰𝐢𝐥𝐥 𝐍𝐄𝐕𝐄𝐑 𝐃𝐌 𝐲𝐨𝐮 𝐟𝐨𝐫 𝐟𝐮𝐧𝐝𝐬 𝐨𝐫 𝐚𝐬𝐤 𝐲𝐨𝐮 𝐭𝐨 𝐜𝐥𝐢𝐜𝐤 𝐬𝐨𝐦𝐞 𝐬𝐭𝐫𝐚𝐧𝐠𝐞 𝐥𝐢𝐧𝐤𝐬.‼️ 📌Please be cautious!

☎️All updates will be announced on our official channels:


Slope Official Links
✅Slope Telegram community:https://t.iss.one/Slope_community
✅Slope Discord community: https://discord.gg/tJW9H5jVrY
✅Slope Twitter: https://twitter.com/slope_finance

🚨𝐒𝐩𝐚𝐦 𝐖𝐚𝐫𝐧𝐢𝐧𝐠🚨


Hello everyone. Please be aware that some Slope communities are bogus. ‼️𝐏𝐥𝐞𝐚𝐬𝐞 𝐤𝐞𝐞𝐩 𝐢𝐧 𝐦𝐢𝐧𝐝 𝐭𝐡𝐚𝐭 𝐒𝐥𝐨𝐩𝐞 𝐰𝐢𝐥𝐥 𝐍𝐄𝐕𝐄𝐑 𝐃𝐌 𝐲𝐨𝐮 𝐟𝐨𝐫 𝐟𝐮𝐧𝐝𝐬 𝐨𝐫 𝐚𝐬𝐤 𝐲𝐨𝐮 𝐭𝐨 𝐜𝐥𝐢𝐜𝐤 𝐬𝐨𝐦𝐞 𝐬𝐭𝐫𝐚𝐧𝐠𝐞 𝐥𝐢𝐧𝐤𝐬.‼️ 📌Please be cautious!

☎️All updates will be announced on our official channels:


Slope Official Links
✅Slope Telegram community:https://t.iss.one/Slope_community
✅Slope Discord community: https://discord.gg/tJW9H5jVrY
✅Slope Twitter: https://twitter.com/slope_finance

🚨𝐒𝐩𝐚𝐦 𝐖𝐚𝐫𝐧𝐢𝐧𝐠🚨


Hello everyone. Please be aware that some Slope communities are bogus. ‼️𝐏𝐥𝐞𝐚𝐬𝐞 𝐤𝐞𝐞𝐩 𝐢𝐧 𝐦𝐢𝐧𝐝 𝐭𝐡𝐚𝐭 𝐒𝐥𝐨𝐩𝐞 𝐰𝐢𝐥𝐥 𝐍𝐄𝐕𝐄𝐑 𝐃𝐌 𝐲𝐨𝐮 𝐟𝐨𝐫 𝐟𝐮𝐧𝐝𝐬 𝐨𝐫 𝐚𝐬𝐤 𝐲𝐨𝐮 𝐭𝐨 𝐜𝐥𝐢𝐜𝐤 𝐬𝐨𝐦𝐞 𝐬𝐭𝐫𝐚𝐧𝐠𝐞 𝐥𝐢𝐧𝐤𝐬.‼️ 📌Please be cautious!

☎️All updates will be announced on our official channels:


Slope Official Links
✅Slope Telegram community:https://t.iss.one/Slope_community
✅Slope Discord community: https://discord.gg/tJW9H5jVrY
✅Slope Twitter: https://twitter.com/slope_finance

🚨𝐒𝐩𝐚𝐦 𝐖𝐚𝐫𝐧𝐢𝐧𝐠🚨


Hello everyone. Please be aware that some Slope communities are bogus. ‼️𝐏𝐥𝐞𝐚𝐬𝐞 𝐤𝐞𝐞𝐩 𝐢𝐧 𝐦𝐢𝐧𝐝 𝐭𝐡𝐚𝐭 𝐒𝐥𝐨𝐩𝐞 𝐰𝐢𝐥𝐥 𝐍𝐄𝐕𝐄𝐑 𝐃𝐌 𝐲𝐨𝐮 𝐟𝐨𝐫 𝐟𝐮𝐧𝐝𝐬 𝐨𝐫 𝐚𝐬𝐤 𝐲𝐨𝐮 𝐭𝐨 𝐜𝐥𝐢𝐜𝐤 𝐬𝐨𝐦𝐞 𝐬𝐭𝐫𝐚𝐧𝐠𝐞 𝐥𝐢𝐧𝐤𝐬.‼️ 📌Please be cautious!

☎️All updates will be announced on our official channels:


Slope Official Links
✅Slope Telegram community:https://t.iss.one/Slope_community
✅Slope Discord community: https://discord.gg/tJW9H5jVrY
✅Slope Twitter: https://twitter.com/slope_finance

Slope Update - 13 Aug
▪️The release of the auditing statements has been postponed as they are still in progress. We will link to both when they become available.

Link: https://twitter.com/slope_finance/status/1558324406782345216

Thank you again to osec_io + SlowMist_Team for their efforts assessing/reviewing the breach.
They have now both published full reports (below):
▪️ OtterSec - https://osec.io/reports/slope-investigation-report.pdf
▪️ SlowMist - https://slowmist.iss.onedium.com/analysis-of-a-large-scale-attack-on-solana-part-2-ee105d907c12
We will also publish an internal Slope factsheet tomorrow.

Slope Wallet Sentry Vulnerability — Digital Forensics and Incident Response Report
https://slope-finance.medium.com/slope-wallet-sentry-vulnerability-digital-forensics-and-incident-response-report-d7a5904e5a39

Slope Official Links

Twitter: https://mobile.twitter.com/slope_finance (Verified)
Telegram: https://t.iss.one/Slope_community
Discord: https://discord.gg/tJW9H5jVrY
Medium: https://slope-finance.medium.com/

📌 We will update everything on Slope official channels

🚨 🚨 Please be careful with scammers’ fake accounts.

Dear Slope Community,

🔸 We understand the frustration you must be feeling.

🔸 The rumors that the team rugged or abandoned the project are untrue. Even though the audits of our infrastructure have not resulted in any conclusive proof that the Slope vulnerability was the root cause of the incident on August 2nd, the whole team is fully focused on supporting law enforcement authorities in the name of all the affected users to recover the stolen assets. We owe that to the users we let down by exposing a potential vulnerability in the first place.

🔸 Criminal investigations especially in the crypto scene take time. There are promising leads, but until they materialize, please understand that we cannot comment on any details of open investigations.
❤️ Thank you for your patience. This Telegram community will remain the main communication channel. Once an update is available we will post it on the announcement channel.

Slope Wallet