A malicious Solana trading bot hosted on GitHub has been exposed for stealing users’ crypto. Disguised as a profitable trading tool, the bot secretly siphoned funds from wallets connected to it. Security researchers discovered hardcoded wallet addresses within the bot's code, redirecting profits to the scammer. This incident highlights the growing threat of open-source crypto scams targeting unsuspecting traders. Experts urge users to thoroughly review and audit any trading bots or scripts before use. As the crypto space grows, so does the sophistication of malicious actors. Always prioritize wallet security and use trusted tools only.$SOL