On August 2-3, 2022, attackers drained 9,231 Solana wallets when Slope Finance's mobile apps shipped user seed phrases in plaintext to an external logging service, exposing credentials outside the device. Every affected address had been created, imported, or used in the Slope iOS/Android apps.