[Polkadot Foundation Warns of Malicious Code in Fearless Browser Extension] Odaily Planet Daily News – The Polkadot Community Foundation has issued a security notice stating that versions 3.0.1, 3.0.3, 3.0.4, and 3.0.5 of the third-party wallet Fearless browser extension contain malicious code. When users unlock their wallets, private keys may be sent to an attacker’s server. The malicious code was active at different times between February 2025 and October 10, 2026. So far, eight users have reported unauthorized transactions potentially related to this vulnerability, involving a total of 17,286 DOT. The Polkadot Foundation advises users who have used the aforementioned extensions since February 2025 to consider all accounts within them as compromised. Users should generate new keys using another wallet and transfer their assets as soon as possible. Simply switching wallet applications, changing passwords, or reinstalling the extension will not eliminate the risk. Upon investigation, no malicious code has been found in the Android and iOS mobile versions of the Fearless wallet. However, if the same key imported into the browser extension was also used in the mobile wallet, that key should still be considered compromised.