SlowMist finds MCP plugin vulnerabilities that can leak wallet private keys

SlowMist's security audits have found MCP plugin vulnerabilities that could leak a wallet's private key directly, not just redirect an agent to an unapproved service. The attack does not touch the wallet's own code, with a single compromised plugin sufficient.

Detected & updated continuously · Source: Nebula