ChainCatcher message, security researcher dm posted on social media: A certain Web3 open-source project on Github can steal users' Solana private keys.In response, Slow Mist founder Yu Sen commented on the X platform: "This open-source bot has backdoor code to steal private keys. If you are not familiar with the code and see garbled text in the open-source project code, you need to be alert."