Fearless Wallet security breach and Polkadot market impact

The Polkadot Community Foundation issued a security warning regarding the Fearless Wallet browser extension, which leaked users' private keys to an attacker's server for approximately 571 days. The malicious code was active intermittently between February 19, 2025, and October 10, 2026, affecting browser extension versions 3.0.1, 3.0.3, 3.0.4, and 3.0.5. The vulnerability allowed attackers to gather recovery phrases or backup files when users unlocked the wallet. While mobile applications for Android and iOS remained secure, the foundation warned that any private key previously used within the compromised extension was at risk.

Following the breach, the price of Polkadot (DOT) experienced significant volatility, dropping approximately 10% within a 24-hour period. Reports indicated that at least 17,286 DOT had been stolen. This price decline occurred alongside broader market selling pressure, with the token struggling to maintain support levels despite recent changes to Polkadot’s token economics, such as the introduction of a maximum supply cap of 2.1 billion DOT.

Recent market activity shows DOT testing the critical $1.00 support level after a failed recovery attempt where the price reached $1.20. The breach has also prompted debate regarding a July network upgrade that reduced the staking unbonding period from 28 days to approximately 1–2 days. While this change increased liquidity, observers note it also shortened the window for users to react to compromised credentials before assets are transferred.