# Fearless Wallet Extension May Expose Keys as Users Report 17,286 DOT Lost

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/37311
Published: 2026-10-22T02:02:12.000Z
Updated: 2026-10-22T02:02:12.000Z
Section: Technology

> Eight users reported unauthorized transactions that may be linked to the issue. The affected releases are 3.0.1, 3.0.3, 3.0.4 and 3.0.5.

The Polkadot Community Foundation warned that four Fearless Wallet browser-extension versions contain malicious code that can send users’ private keys to an attacker when they unlock a wallet, putting accounts used with those releases at risk.

The affected releases are 3.0.1, 3.0.3, 3.0.4 and 3.0.5. The code was active during different periods between February 2025 and Oct. 10, 2026, the foundation said. Eight users have reported unauthorized transactions that may be connected to the issue, involving 17,286 DOT.

The foundation advised anyone who used the extension since February 2025 to consider every account in it compromised, create new keys in another wallet and move assets. Changing a password, switching wallet apps or reinstalling the extension does not remove exposure from keys already sent out.

Android and iOS versions checked by the foundation do not contain the code. But any key previously imported into either mobile version from the browser extension should still be treated as compromised.