$459K Stolen from 20,933 Wallets via Compromised Solana Trading Bot

A recent investigation by Bitquery has shed light on a $459,000 wallet drain that occurred on September 30 through the Solana trading bot Tradewiz. The affected users lost approximately $459,000 across 20,933 wallets.

Researchers linked the address collecting stolen funds to another wallet that made 27 trades through Tradewiz a month earlier. This connection offers investigators a starting point but does not establish who controlled the wallets or how the private keys were exposed.

The incident raised questions about the security of Tradewiz's SOL PVP export feature, which allows users to import and export wallet keys. However, the company's own documentation recommends against exporting private keys, stating: 'By not exporting your private keys, we can ensure 100% security of your assets.'

Tradewiz has instructed customers to stop using existing SOL PVP wallet addresses and has announced a precautionary pause in EVM services while it conducts security checks. The company has also promised to fully compensate users for losses caused by the incident.