A Chrome extension posing as a Solana trading assistant quietly siphoned fees from user swaps for months, using obfuscated transaction logic to route a slice of every trade to an attacker-controlled ...