[SlowMist Warning: Solana Wallet Owner Permission Tampering Attack Risk] The SlowMist security team has issued a security alert regarding a phishing attack that recently caused a user's account Owner permissions to be transferred, resulting in the theft of over $3 million in assets. Additionally, approximately $2 million in assets stored in DeFi protocols were successfully recovered with the assistance of the relevant DeFi platforms. This attack involved replacing core permissions (Owner permissions), rendering the victim unable to transfer funds, revoke authorizations, or operate DeFi assets. Although the funds appeared normal, they were already out of the victim's control. The attackers used two methods to deceive users: first, constructing transactions with no changes in funds, and second, exploiting users' lack of awareness about Solana's modifiable account ownership feature. SlowMist advises users to exercise caution when signing authorizations, especially regarding high-risk permission modification operations.