{"id":1390,"date":"2025-11-27T23:38:58","date_gmt":"2025-11-27T23:38:58","guid":{"rendered":"https:\/\/365crypto.org\/fr\/2025\/11\/27\/une-extension-chrome-vole-vos-swaps-solana\/"},"modified":"2025-11-27T23:38:58","modified_gmt":"2025-11-27T23:38:58","slug":"une-extension-chrome-vole-vos-swaps-solana","status":"publish","type":"post","link":"https:\/\/365crypto.org\/fr\/2025\/11\/27\/une-extension-chrome-vole-vos-swaps-solana\/","title":{"rendered":"Une extension Chrome vole vos swaps Solana"},"content":{"rendered":"<p>Une extension Chrome malveillante, Crypto Copilot, permet de trader Solana depuis X (Twitter) mais vole secr\u00e8tement une partie de chaque swap.<\/p>\n<p>La soci\u00e9t\u00e9 de cybers\u00e9curit\u00e9 Socket a d\u00e9couvert que Crypto Copilot ajoute un transfert cach\u00e9 \u00e0 chaque \u00e9change. Au lieu de vider les portefeuilles, il vole 0,0013 SOL ou 0,05 % par transaction.<\/p>\n<p>Il utilise Raydium pour ex\u00e9cuter les swaps mais ajoute en secret une instruction transf\u00e9rant du SOL \u00e0 l\u2019attaquant. L\u2019utilisateur voit seulement le swap et la confirmation du portefeuille ne r\u00e9v\u00e8le pas les instructions cach\u00e9es.<\/p>\n<p>\u00ab Les utilisateurs signent ce qui semble \u00eatre un seul swap, mais les deux instructions s\u2019ex\u00e9cutent atomiquement sur la blockchain \u00bb, explique Socket.<\/p>\n<p>L\u2019extension est en ligne depuis le 18 juin 2024, avec environ 15 utilisateurs. Elle se vend comme un outil pratique pour des swaps Solana instantan\u00e9s sur Twitter, mais siphonne silencieusement des fonds.<\/p>\n<p>Les extensions Chrome malveillantes ciblant la crypto se multiplient. Ce mois-ci, Socket a averti d\u2019une autre extension volant des fonds. En ao\u00fbt, Jupiter a trouv\u00e9 un plugin vidant des portefeuilles Solana. En juin 2024, un trader chinois a perdu 1 million de dollars \u00e0 cause d\u2019un plugin volant les cookies du navigateur et l\u2019acc\u00e8s \u00e0 Binance.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Une extension Chrome malveillante, Crypto Copilot, permet de trader Solana depuis X (Twitter) mais vole secr\u00e8tement une partie de chaque&#8230;&#8230;<\/p>\n","protected":false},"author":1,"featured_media":1389,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[1083,1338,1351,221],"class_list":["post-1390","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nouvelles","tag-arnaque","tag-chrome","tag-extension","tag-solana"],"jetpack_featured_media_url":"https:\/\/365crypto.org\/fr\/wp-content\/uploads\/sites\/11\/2025\/11\/solmalware.webp","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/365crypto.org\/fr\/wp-json\/wp\/v2\/posts\/1390","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/365crypto.org\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/365crypto.org\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/365crypto.org\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/365crypto.org\/fr\/wp-json\/wp\/v2\/comments?post=1390"}],"version-history":[{"count":0,"href":"https:\/\/365crypto.org\/fr\/wp-json\/wp\/v2\/posts\/1390\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/365crypto.org\/fr\/wp-json\/wp\/v2\/media\/1389"}],"wp:attachment":[{"href":"https:\/\/365crypto.org\/fr\/wp-json\/wp\/v2\/media?parent=1390"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/365crypto.org\/fr\/wp-json\/wp\/v2\/categories?post=1390"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/365crypto.org\/fr\/wp-json\/wp\/v2\/tags?post=1390"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}