Malicious Chrome Extension Skims Fees From Solana Trades

[mendez]

A fake Chrome extension called Crypto Copilot is secretly siphoning fees from every Solana swap, according to cybersecurity firm Socket. The tool injects an extra transfer into each trade, skimming 0.0013 SOL or 0.05% directly into the attacker’s wallet while appearing to perform a normal swap.

[Nahid Hossen]

Skimming attacks are getting smarter, hitting users quietly over time.