The open source script t3rn-swap was exposed to contain a private key backdoor, and the author said that "he was also stolen"

PANews reports on May 8th that according to X user @Xuegaogx, a backdoor code was discovered in the GitHub open-source library t3rn-swap, which would silently send users' private keys to a specified ID via Telegram. The critical backdoor is located in the record_config function. The project author @hao3313076 responded that he was "also stolen", but the comments were sarcastically described as "too honest", and the community calls for immediately stopping the use of the script and changing related private keys.