Polkadot Community Foundation: Fearless Wallet browser extension has a risk of private key leakage

The Polkadot Community Foundation issued a security warning on the Polkadot forum stating that versions 3.1, 3.3, 3.4, and 3.5 of the browser extension for the third-party wallet Fearless Wallet contain malicious code, which may send users' private keys to a server controlled by attackers when unlocking the wallet.

The related code was added on February 19, 2025, with a code change named "TON ecosystem," and it will take effect intermittently from February 2025 to October 10, 2026.