Skip to main content
AVOID.NET

Slope Wallet

avoid.net/slope-wallet→28/100·88% conf.
[✓ FACT-CHECKED]· reviewed once · last review 15 Jun 2026[src:defillama]

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·x4PpwY…hLqJ
last updated 2026-08-29

Summary

Slope Wallet (Slope Finance) was a Solana-based mobile cryptocurrency wallet that suffered a catastrophic security breach on August 2, 2022, in which over 9,200 wallets were drained of approximately $4–8 million in assets due to the app transmitting users' unencrypted seed phrases to a third-party telemetry service (Sentry). The root cause was a severe security misconfiguration by Slope Finance, in which the mobile application logged plaintext private key material without proper scrubbing. No formal victim compensation was established, the team declined to publicly accept responsibility, and founder Leal Cheung subsequently launched a new project (zkME) without resolution for affected users.

Connected Entities

8 entities · 60 linked investigations
Organizations
□Pump.fun / Solana Labs / Jito Labs — RICO MEV Class Action (SDNY 2026)22□Ethereum90□TRON□Binance□Solana□Slope Wallet□Genesis Global Trading□ZachXBT
Relationships
  • Slope Wallet→mentioned with→Binance(65%)
  • Slope Wallet→mentioned with→Solana(80%)
  • Slope Wallet→mentioned with→Ethereum(70%)
  • Slope Wallet→mentioned with→ZachXBT(70%)
  • Slope Wallet→mentioned with→TRON(65%)
  • ZachXBT→mentioned with→Ethereum(70%)
  • ZachXBT→mentioned with→Binance(60%)
  • Binance→mentioned with→Ethereum(65%)
  • Slope Wallet→mentioned with→Pump.fun / Solana Labs / Jito Labs — RICO MEV Class Action (SDNY 2026)(75%)
  • Solana→mentioned with→Pump.fun / Solana Labs / Jito Labs — RICO MEV Class Action (SDNY 2026)(80%)
  • + 6 more
Have evidence about Slope Wallet?

Timeline(12 events)

September 2021

Slope Finance launches Slope Wallet mobile application on Solana.

24 February 2022

Slope Finance closes $8 million Series A funding round co-led by Solana Ventures and Jump Capital.

2 August 2022

Attack begins at 22:37 UTC. Attacker drains 9,229 wallets over approximately 7 hours, stealing an estimated $4.1–8 million in assets.

3 August 2022

Solana developers and security researchers publicly attribute the exploit to Slope Wallet's Sentry misconfiguration. Solana Foundation confirms no protocol-level vulnerability.

3 August 2022

Slope Finance offers a 10% bounty to the attacker for return of 90% of stolen funds within 48 hours. No response from attacker.

4 August 2022

Security firm OtterSec and others confirm that Slope's app transmitted seed phrases in plaintext to centralized Sentry servers. The Block publishes findings.

10 August 2022

Sentry publishes its own post-mortem, clarifying that Slope Finance failed to configure available data-scrubbing settings.

August 2022

Slope Finance publishes its Digital Forensics and Incident Response (DFIR) report acknowledging the Sentry vulnerability but concluding it cannot 'conclusively explain' the full hack.

August 2022

Victims organize under slopeaction.org seeking reimbursement and a formal acknowledgment of culpability.

March 2023

ZachXBT observes hacker addresses becoming active again, laundering funds from original theft addresses on Solana.

October 2023

ZachXBT publishes on-chain analysis tracing stolen funds from Solana through Binance nested exchanges, Tornado Cash (322 ETH), SWFT bridge to TRON, and into OTC cash-out addresses.

October 2023

ZachXBT warns the public to avoid zkME, a new project allegedly founded by Slope Wallet's Leal Cheung following abandonment of Slope Finance.

Provenance & Audit Trail

Decision Log

  • #3review approve+16Recorded on Solana ✓6/15/2026, 7:30:07 PM
    slot 426697976 · hash 5dnTj3pibUQ3xdsMetpt1PwTcCrz5JrP2XMP6rKuhyUq
  • #2reviewRecorded on Solana ✓6/15/2026, 7:30:07 PM
    slot 426697971 · hash 3Av3HjSTK1mTRFtJh32WswtEVW74PbrZbr9vFqUyie6x
  • #1publishRecorded on Solana ✓5/27/2026, 6:18:05 PM
    slot 422555086 · hash 4HQUL4X2pT3GuRLXoUxDxNga1uJncTaKkNHxrXsVU9v4

This investigation is cryptographically anchored to the Solana blockchain (3 decisions). 10 of 15 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:48 AM

last updated: 8/29/2026, 1:34:27 AM

3 views

avoid.net — verified advice for a post-truth world