SECURITY ALERT
The tool was there to watch the app.
Now it is in the incident report.
Proxima, a Solana trading app, said on X at 06:48 UTC on Saturday that it was “impacted by a security vulnerability affecting SigNoz”, a third-party provider, with “approximately $200-250k in affected funds (less than 5% of total funds)”, in a post by Theo, who describes himself on X as a Proxima co-founder.
He said affected users “will be fully reimbursed”.
At 12:24 UTC he said the breach began at SigNoz and reached “a specific layer” of Proxima’s infrastructure. Other protocols using the provider were affected “to varying degrees”, he said.
Only wallets imported, exported or created through Proxima in the past 15 days were potentially compromised, he said. He said token supply and EVM balances were not affected.
Affected SOL balances would be refunded when the app reopened “tonight”, with a 4 to 6 hour estimate. A post-mortem would follow.
How did a provider’s flaw reach wallet keys?
What is not known
Every figure above comes from Proxima’s own posts. We have not verified the loss, the cause, the 15-day window or the refunds, and we found no statement from SigNoz by 21:00 UTC.
Anonymous accounts on X have posted their own on-chain tallies. We do not use them. We could not confirm that Proxima had reopened.
Earlier on Saturday, Unocoin put its own loss at about $200,000. Different mechanism, similar size.
Will the post-mortem say where the keys were exposed?
Protect yourself
- Do not send funds to wallets Proxima marks as affected.
- Ignore refund offers by direct message.
- If you made, imported or exported a wallet there in the past 15 days, check the app once it reopens. See what a private key is.
Corrections and new evidence: [email protected]
This article is for information only and is not investment advice.