Solareum Shuts Down After Security Breach, User Funds Lost

Following a security breach related to a Solana-based wallet-draining exploit, the Solareum Telegram trading app has announced its closure. The exploit, estimated to have affected over 300 Solana users and drained approximately $523,000 worth of SOL, has been linked to Solareum after the team acknowledged a potential exploit. While Solareum plans to contact authorities to freeze any stolen crypto assets, the project's Telegram channel has been flooded with demands for answers and threats of legal action as users seek compensation.

Solareum Announces Closure Following Security Breach, User Funds Compromised

Background:

Solareum, a Telegram-based trading app for Solana tokens, has announced its closure after a security breach resulted in the theft of approximately $523,000 worth of SOL from user wallets. The exploit, which affected over 300 Solana users, raised suspicions about the involvement of the popular Telegram trading bot, BONKbot.

Initial Suspicions and BONKbot's Denial:

Initially, the BONKbot team denied responsibility for the security lapse, stating that users impacted by the exploit had previously exported their private keys to other applications. This led to questions about the source of the vulnerability.

Solareum's Admission and Subsequent Closure:

In response to the increasing speculation, Solareum acknowledged the possibility of an exploit on Friday through a tweet. Subsequently, on Saturday, the team announced the closure of the Solareum project in a Telegram message, citing a combination of insufficient funds, evolving market trends, and the recent security breach as factors in their decision.

Impact and Reaction:

The incident has caused considerable concern among users, with many demanding answers and threatening legal action if Solareum does not announce plans for compensation. Solareum's Telegram channel has become a hub for frustrated users seeking clarity.

BONKbot's Analysis and Implication of Solareum:

BONKbot, with over 270,000 users, was initially suspected as the source of the exploit. The team, however, released data indicating that the vulnerability was likely tied to a specific application where users had imported their private keys. On Monday, BONKbot confirmed to Decrypt that their analysis pointed to Solareum as the potential source of the breach.

Uncertainties and Lack of Clarity:

The precise nature of the exploit remains unclear, with BONKbot's team noting that their analysis was probabilistic rather than deterministic due to the lack of access to Solareum's codebase or logs. They further emphasized that it was still undetermined whether the breach was external or an internal drain.

Solareum's Response and Lack of Compensation Plan:

Solareum has stated that they will contact authorities in an attempt to freeze any stolen crypto assets if they are transferred to centralized exchanges. However, the team has not provided any information regarding compensation for affected users. Despite multiple attempts by Decrypt for comment, Solareum has not yet responded.

Conclusion:

Solareum's closure and the ongoing investigation into the security breach have raised questions about the safety and reliability of Telegram-based trading platforms. The incident highlights the importance of robust security measures and the need for greater transparency and accountability within the cryptocurrency ecosystem. As the investigation continues, it remains unclear whether users who lost funds will receive any compensation.