Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> The website asked for permission from a Phantom wallet, and it actually drained all SOL from their wallet.

Does anyone else see this as a massive failure on Phantom wallet's part?

That's like my bank, when I pay online using a credit card, asking me to "confirm full access by merchant XYZ to your account" instead of "confirm payment of $50 to merchant XYZ". I mean, DeFi is supposed to be better than legacy institutions, right?!



Phantom by default requests approval before executing transactions, and shows a simulation (e.g. balance changes like this). This can be disabled in the advanced settings (or users can approve transactions without reading the approval popup...).


This is true, but I think that they really should disable approving the transaction prior to the simulation finishing. Because right now, you can simply approve a transaction blindly without letting this complete and seeing the changes in your account balance, which is probably what the people who got their wallet drained did I'd assume, just blindly click purchase because they are in full FOMO mode for their ape NFT.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: