Skip to main content
Sign in

Slope Wallet

avoid.net/slope-wallet→28/100·88% conf.
[VERIFIED][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·x4PpwY…hLqJ

Summary

Slope Wallet (Slope Finance) was a Solana-based mobile cryptocurrency wallet that suffered a catastrophic security breach on August 2, 2022, in which over 9,200 wallets were drained of approximately $4–8 million in assets due to the app transmitting users' unencrypted seed phrases to a third-party telemetry service (Sentry). The root cause was a severe security misconfiguration by Slope Finance, in which the mobile application logged plaintext private key material without proper scrubbing. No formal victim compensation was established, the team declined to publicly accept responsibility, and founder Leal Cheung subsequently launched a new project (zkME) without resolution for affected users.

Connected Entities

1 entities
Organizations
□Slope Wallet
Relationships
    Have evidence about Slope Wallet?

    Timeline(12 events)

    September 2021

    Slope Finance launches Slope Wallet mobile application on Solana.

    24 February 2022

    Slope Finance closes $8 million Series A funding round co-led by Solana Ventures and Jump Capital.

    2 August 2022

    Attack begins at 22:37 UTC. Attacker drains 9,229 wallets over approximately 7 hours, stealing an estimated $4.1–8 million in assets.

    3 August 2022

    Solana developers and security researchers publicly attribute the exploit to Slope Wallet's Sentry misconfiguration. Solana Foundation confirms no protocol-level vulnerability.

    3 August 2022

    Slope Finance offers a 10% bounty to the attacker for return of 90% of stolen funds within 48 hours. No response from attacker.

    4 August 2022

    Security firm OtterSec and others confirm that Slope's app transmitted seed phrases in plaintext to centralized Sentry servers. The Block publishes findings.

    10 August 2022

    Sentry publishes its own post-mortem, clarifying that Slope Finance failed to configure available data-scrubbing settings.

    August 2022

    Slope Finance publishes its Digital Forensics and Incident Response (DFIR) report acknowledging the Sentry vulnerability but concluding it cannot 'conclusively explain' the full hack.

    August 2022

    Victims organize under slopeaction.org seeking reimbursement and a formal acknowledgment of culpability.

    March 2023

    ZachXBT observes hacker addresses becoming active again, laundering funds from original theft addresses on Solana.

    October 2023

    ZachXBT publishes on-chain analysis tracing stolen funds from Solana through Binance nested exchanges, Tornado Cash (322 ETH), SWFT bridge to TRON, and into OTC cash-out addresses.

    October 2023

    ZachXBT warns the public to avoid zkME, a new project allegedly founded by Slope Wallet's Leal Cheung following abandonment of Slope Finance.

    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain9 Wayback Archivessrc:defillama

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (3 events). 9 of 15 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 5/4/2026, 2:54:48 AM

    last updated: 8/30/2026, 5:14:12 AM

    avoid.net — verified advice for a post-truth world