DogWifTools Hack

What happened

DogWifTools' Windows releases were compromised in January 2025, exposing users' wallet keys. Developers reported tampering with versions 1.6.3-1.6.6. A community estimate exceeded $10 million, but the final loss was disputed and not independently established.

Technical Root Cause

The reported failure was compromise of the software distribution process. The available evidence does not establish that the altered binaries were cryptographically signed, or a final verified loss or recovery amount.

Case & protocol details

Classification Infrastructure / Frontend & Infrastructure

Implementation language Move

How it happened

1. The developers said an attacker extracted a GitHub token by reverse-engineering the software.
2. Access to the private repository allowed replacement of legitimate Windows releases with trojanized builds.
3. Running an affected build downloaded updater.exe into AppData, targeting locally stored wallet keys.
4. Users reported drained wallets; the team announced an investigation and additional security measures.

Evidence & learning

Sources and on-chain records

• report Report x.com
• analysis Solana Pump.fun tool DogWifTool compromised to drain wallets bleepingcomputer.com