Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
2 IOCs

Beware of Solidity Pro: A Targeted Poisoning Attack on Web3 Developers

SlowMist
SlowMist
Published August 19, 2026Original Report

Excerpt

Background Solidity Pro is a VS Code extension for Solidity/Web3 developers. It is positioned as a development assistance tool, offering features such as Gas queries, token prices, code snippets, and compilation hints. Its GitHub repository has also previously promoted security capabilities such as AI Audit and Security Scanner. In its public activity, Solidity Pro has used two publishers (publisher identities), helper-beeps and web3devtoolsx. Their corresponding Extension…

Read the original report →

Indicators of Compromise

Open the mindmap →

2 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA256bcbaf774f9cea0b0131859b96ba0eeadfd5a49bba59302de1bcf3d884300d508MediumScore 53/100First seen
SHA2567b53b1d93f46babc7415d898e17e71ffb6f3a3af3adb222f21c03adea8b30d50MediumScore 53/100First seen

IOC Relationship Graph

Building graph…