{"id":3889,"date":"2024-09-05T10:24:32","date_gmt":"2024-09-05T10:24:32","guid":{"rendered":"https:\/\/solanacrypto.news\/2024\/09\/05\/new-solana-vulnerability-burns-tokens-in-your-wallet\/"},"modified":"2024-09-05T10:24:32","modified_gmt":"2024-09-05T10:24:32","slug":"new-solana-vulnerability-burns-tokens-in-your-wallet","status":"publish","type":"post","link":"https:\/\/solanacrypto.news\/2024\/09\/05\/new-solana-vulnerability-burns-tokens-in-your-wallet\/","title":{"rendered":"New Solana Vulnerability Burns Tokens In Your Wallet"},"content":{"rendered":"<div>\n<p><span style=\"font-weight: 400;\"><\/p>\n<div class=\"su-list\" style=\"margin-left:0px\">\n<ul>\n<li><i class=\"sui sui-chevron-circle-right\" style=\"color:#33B249\"\/> <span style=\"font-weight: 400;\">Scammers are <strong>e<\/strong><\/span><b>xploiting a feature called \u2018Permanent Delegate\u2019<\/b><span style=\"font-weight: 400;\"> in Solana tokens.<\/span><\/li>\n<li><i class=\"sui sui-chevron-circle-right\" style=\"color:#33B249\"\/> <span style=\"font-weight: 400;\">This delegate can <\/span><b>burn tokens immediately after they\u2019re swapped into a wallet<\/b><span style=\"font-weight: 400;\">, making them disappear.<\/span><\/li>\n<li><i class=\"sui sui-chevron-circle-right\" style=\"color:#33B249\"\/> <span style=\"font-weight: 400;\">Tools like Jupiter Exchange and RugCheck <\/span><b>identify tokens with this risky extension<\/b><span style=\"font-weight: 400;\">.<\/span><\/li>\n<\/ul>\n<\/div>\n<p><\/span><\/p>\n<p><picture fetchpriority=\"high\" decoding=\"async\" class=\"aligncenter size-large wp-image-3567317\"><source type=\"image\/webp\" data-lazy-srcset=\"https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-1200x683.jpg.webp 1200w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-300x171.jpg.webp 300w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-150x85.jpg.webp 150w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-768x437.jpg.webp 768w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-1536x874.jpg.webp 1536w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-777x442.jpg.webp 777w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens.jpg.webp 1972w\" srcset=\"data:image\/svg+xml,%3Csvg%20xmlns='http:\/\/www.w3.org\/2000\/svg'%20viewBox='0%200%201200%20683'%3E%3C\/svg%3E\" data-lazy-sizes=\"(max-width: 1200px) 100vw, 1200px\"\/><img fetchpriority=\"high\" decoding=\"async\" alt=\"New Solana Vulnerability Burns Tokens In Your Wallet\" width=\"1200\" height=\"683\" srcset=\"https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-1200x683.jpg 1200w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-300x171.jpg 300w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-150x85.jpg 150w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-768x437.jpg 768w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-1536x874.jpg 1536w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-777x442.jpg 777w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens.jpg 1972w\" data-lazy-sizes=\"(max-width: 1200px) 100vw, 1200px\" src=\"https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-1200x683.jpg\"\/>\n<\/picture>\n<noscript><picture fetchpriority=\"high\" decoding=\"async\" class=\"aligncenter size-large wp-image-3567317\"><source type=\"image\/webp\" srcset=\"https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-1200x683.jpg.webp 1200w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-300x171.jpg.webp 300w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-150x85.jpg.webp 150w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-768x437.jpg.webp 768w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-1536x874.jpg.webp 1536w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-777x442.jpg.webp 777w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens.jpg.webp 1972w\" sizes=\"(max-width: 1200px) 100vw, 1200px\"\/><img fetchpriority=\"high\" decoding=\"async\" src=\"https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-1200x683.jpg\" alt=\"New Solana Vulnerability Burns Tokens In Your Wallet\" width=\"1200\" height=\"683\" srcset=\"https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-1200x683.jpg 1200w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-300x171.jpg 300w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-150x85.jpg 150w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-768x437.jpg 768w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-1536x874.jpg 1536w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens-777x442.jpg 777w, https:\/\/techreport.com\/wp-content\/uploads\/2024\/09\/new-solana-vulnerability-burns-tokens.jpg 1972w\" sizes=\"(max-width: 1200px) 100vw, 1200px\"\/>\n<\/picture>\n<\/noscript><\/p>\n<p><span style=\"font-weight: 400;\">You purchase tokens, you swap them, you watch them arrive in your wallet \u2013 and then they vanish. Sounds like a simple transaction failure, right? Perhaps, but crypto users are <\/span><b>worried about an insidious new crypto scam<\/b><span style=\"font-weight: 400;\"> with Solana tokens.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Let\u2019s discuss the mysterious Permanent Delegate feature and how scammers are using it to manipulate basic tokenomics to their advantage.<\/span><\/p>\n<h2 id=\"scammers_use_permanent_delegate_feature_to_burn_tokens\">Scammers Use Permanent Delegate Feature to Burn Tokens\u2026<\/h2>\n<p><span style=\"font-weight: 400;\"><\/p>\n<div class=\"su-note\" style=\"border-color:#e5e54c;border-radius:3px;-moz-border-radius:3px;-webkit-border-radius:3px;\">\n<p>Within the Solana ecosystem, scammers can exploit the \u2018Permanent Delegate\u2019 feature to burn tokens immediately after users receive them.<\/p>\n<\/div>\n<p><\/span><\/p>\n<p><span style=\"font-weight: 400;\">According to Slorg, a member of Jupiter\u2019s Core Working Group, victims are left confused when<\/span><b> tokens disappear within seconds after a swap<\/b><span style=\"font-weight: 400;\">, as scammers use this feature to <\/span><a target=\"_blank\" class=\"general-link\" href=\"https:\/\/techreport.com\/cryptocurrency\/learning\/ultimate-crypto-glossary\/#3_burning\" rel=\"noopener\"><span style=\"font-weight: 400;\">burn tokens<\/span><\/a><span style=\"font-weight: 400;\"> without permission.<br \/><\/span><\/p>\n<blockquote class=\"twitter-tweet\"><p><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"48\" height=\"37\" viewbox=\"0 0 48 37\" class=\"pullquote-icon\" fill=\"none\">\n    <path fill=\"#7C95FB\" d=\"M17.4489 36.6667H0V24.7654C0 19.9496 0.43467 16.1602 1.30401 13.397C2.21475 10.5944 3.87063 8.0878 6.27167 5.87727C8.6727 3.66675 11.7361 1.92991 15.4618 0.666748L18.8771 7.53517C15.3997 8.64043 12.8952 10.1799 11.3635 12.1536C9.87322 14.1273 9.08668 16.7523 9.00388 20.0286H17.4489V36.6667ZM46.5718 36.6667H29.1229V24.7654C29.1229 19.9102 29.5576 16.101 30.4269 13.3378C31.3376 10.5746 32.9935 8.0878 35.3946 5.87727C37.837 3.66675 40.9004 1.92991 44.5847 0.666748L48 7.53517C44.5226 8.64043 42.0181 10.1799 40.4864 12.1536C38.9961 14.1273 38.2096 16.7523 38.1268 20.0286H46.5718V36.6667Z\"\/>\n<\/svg><\/p>\n<p dir=\"ltr\" lang=\"en\">Scammers have found a way to burn tokens inside your Solana wallet<\/p>\n<p>But with a little awareness you can avoid becoming their next victim.<\/p>\n<p>\ud83e\uddf5(1\/8) <a target=\"_blank\" href=\"https:\/\/t.co\/wZoNhWAIp0\" rel=\"noopener\">pic.twitter.com\/wZoNhWAIp0<\/a><\/p>\n<p>\u2014 Slorg (@SlorgoftheSlugs) <a target=\"_blank\" href=\"https:\/\/twitter.com\/SlorgoftheSlugs\/status\/1830769369049375204?ref_src=twsrc%5Etfw\" rel=\"noopener\">September 3, 2024<\/a><\/p>\n<\/blockquote>\n<p><span style=\"font-weight: 400;\">The \u2018Permanent Delegate\u2019 extension (part of Solana\u2019s Token 2022 standard) originally had legitimate goals, such as reclaiming tokens sent by mistake, enabling refunds, or ensuring compliance with sanctions.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Scammers had something else in mind, though. They found a way to turn the legitimate tool into a <\/span><b>weapon of market manipulation<\/b><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The Permanent Delegate feature <\/span><b>applies to all tokens in a particular mint<\/b><span style=\"font-weight: 400;\">. A new, freshly minted Solana project could easily have the feature on every token.<\/span><\/p>\n<p style=\"font-size: 16px; font-weight: bold; color: #1c315f; padding: 15px;\"><em>The person who owns the original mint can literally reach into the token holder\u2019s wallets and burn the tokens remotely.<\/em><\/p>\n<p><span style=\"font-weight: 400;\">In one case, a user swapped for a token called \u2018RED,\u2019 and seven seconds after the transaction was confirmed, <\/span><b>all tokens were burned<\/b><span style=\"font-weight: 400;\">.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Permanent Delegate\u2019s unrestricted authority even allows scammers to <\/span><b>destroy tokens in the transaction without the user\u2019s consent<\/b><span style=\"font-weight: 400;\">.<\/span><\/p>\n<h2 id=\"but_why\">\u2026But Why?<\/h2>\n<p><span style=\"font-weight: 400;\">Some scammers may <\/span><b>burn tokens purely for chaos and disruption<\/b><span style=\"font-weight: 400;\">, trolling victims and leaving them bewildered and frustrated.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">However, burning tokens could also be a far more sophisticated market strategy. By reducing the number of tokens in circulation, scammers can potentially <\/span><b>influence prices in decentralized finance (DeFi) protocols<\/b><span style=\"font-weight: 400;\"> or prevent users from selling tokens.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This creates the illusion of stability, manipulating the token\u2019s floating supply and artificially inflating its value.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Scammers can <\/span><b>profit by influencing the token\u2019s price or creating scarcity<\/b><span style=\"font-weight: 400;\">, and it\u2019s especially powerful for tokens with small market caps \u2013 such as new Solana projects.\u00a0<\/span><\/p>\n<h2 id=\"conclusion_neutralizing_permanent_delegate_can_it_help\">Conclusion \u2013 Neutralizing Permanent Delegate. Can It Help?<\/h2>\n<p><b>Detection is the best prevention<\/b><span style=\"font-weight: 400;\"> for this particular scam. Platforms like <\/span><a target=\"_blank\" class=\"general-link\" href=\"https:\/\/x.com\/JupiterExchange\" rel=\"noopener\"><span style=\"font-weight: 400;\">Jupiter Exchange<\/span><\/a><span style=\"font-weight: 400;\"> and <\/span><a target=\"_blank\" class=\"general-link\" href=\"https:\/\/x.com\/Rugcheckxyz\" rel=\"noopener\"><span style=\"font-weight: 400;\">RugCheck<\/span><\/a><span style=\"font-weight: 400;\"> have developed indicators that warn users when the Permanent Delegate extension is active in a token.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Users are advised to exercise caution, <\/span><b>thoroughly check token details<\/b><span style=\"font-weight: 400;\">, and avoid rushing transactions. Failure to do so could result in your new tokens vanishing in a puff of smoke.\u00a0<\/span><\/p>\n<h2 id=\"references\">References<\/h2>\n<div class=\"techr-after-content_2\" style=\"margin-bottom: 10px; \" id=\"techr-628045423\">\n<p><i><strong>Disclaimer:<\/strong> The opinions expressed in this article do not constitute financial advice. We encourage readers to conduct their own research and determine their own risk tolerance before making any financial decisions. Cryptocurrency is a highly volatile, high-risk asset class.<\/i><\/p>\n<\/div>\n<div class=\"techr-after-content\" style=\"margin-bottom: 10px; \" id=\"techr-595258426\">\n<div style=\"border: 1px solid #E0E0E0; padding: 10px;\">\n<h4 style=\"margin-top: 0px\"><img decoding=\"async\" style=\"margin-right: 5px\" alt=\"The Tech Report - Editorial Process\" width=\"30\" height=\"30\" src=\"https:\/\/techreport.com\/wp-content\/uploads\/2023\/01\/techreport-favicon.svg\"\/><noscript><img decoding=\"async\" style=\"margin-right: 5px\" src=\"https:\/\/techreport.com\/wp-content\/uploads\/2023\/01\/techreport-favicon.svg\" alt=\"The Tech Report - Editorial Process\" width=\"30\" height=\"30\"\/><\/noscript>Our Editorial Process<\/h4>\n<div style=\"font-size: 14px\">The Tech Report <a target=\"_blank\" href=\"https:\/\/techreport.com\/about\/editorial-policy\/\" rel=\"noopener\">editorial policy<\/a> is centered on providing helpful, accurate content that offers real value to our readers. We only work with experienced writers who have specific knowledge in the topics they cover, including latest developments in technology, online privacy, cryptocurrencies, software, and more. Our editorial policy ensures that each topic is researched and curated by our in-house editors. We maintain rigorous journalistic standards, and every article is 100% written by <a target=\"_blank\" href=\"https:\/\/techreport.com\/authors\/\" rel=\"noopener\">real authors<\/a>.<\/div>\n<\/div>\n<\/div><\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Scammers are exploiting a feature called \u2018Permanent Delegate\u2019 in Solana tokens. This delegate can burn tokens immediately after they\u2019re swapped into a wallet, making them disappear. Tools like Jupiter Exchange and RugCheck identify tokens with this risky extension. You purchase tokens, you swap them, you watch them arrive in your wallet \u2013 and then they [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":3890,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_lock_modified_date":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3889","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/solanacrypto.news\/wp-json\/wp\/v2\/posts\/3889","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/solanacrypto.news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solanacrypto.news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solanacrypto.news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/solanacrypto.news\/wp-json\/wp\/v2\/comments?post=3889"}],"version-history":[{"count":0,"href":"https:\/\/solanacrypto.news\/wp-json\/wp\/v2\/posts\/3889\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solanacrypto.news\/wp-json\/wp\/v2\/media\/3890"}],"wp:attachment":[{"href":"https:\/\/solanacrypto.news\/wp-json\/wp\/v2\/media?parent=3889"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solanacrypto.news\/wp-json\/wp\/v2\/categories?post=3889"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solanacrypto.news\/wp-json\/wp\/v2\/tags?post=3889"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}