hacker. False information. Surveillance. CYBER is a podcast on Motherboard, covering the dark side of the Internet.
According to the company, in the latest hack against cryptocurrency investors, hackers stole approximately $135 million from users of blockchain gaming company VulcanForge.
The company stated in a series of tweets that hackers stole private keys to access 96 wallets and stole 4.5 million PYR, which is a token of VulcanForge, which can be used throughout its ecosystem. Sunday and on MondayThe main business of VulcanForge includes the creation of games, such as VulcanVerse, which is called “MMORPG”, and a card game called Berserk.These two games, like almost all blockchain games, are mainly designed as Vehicles for buying and selling in-game items Use PYR to link to NFT.
In encryption, revealing someone’s private key is a clear “game over” because it can completely control the funds held by the corresponding address on the blockchain.
“No words can work right now, we know that.”
VulcanForge announced the hacking on Twitter and its official Discord channel.
“More than 4 million PYR has been stolen from the user’s wallet. It is too early to say this [wallet management service] The ending of Venly: We have no idea why,” the company wrote on Discord, asking users to transfer funds to the popular wallet Metamask. “Once we understand what happened, all stolen funds will be replaced. CTO of Wenli Tell The Block Its services have not been compromised.
“There is no word that can do a lot of things right now, and we know that,” the company wrote On Twitter.
This is the third major theft of cryptocurrency in the past 11 days. The total amount of stolen cryptocurrency in these three hacking attacks was approximately US$404 million. December 2nd, It’s the badger DAO, A blockchain-based decentralized finance (DeFi) platform, suffered a loss of US$119 million.company Ask the hacker to “do the right thing” and return the money. Then four days later, Cryptocurrency exchange BitMart was hacked, A loss of 150 million U.S. dollars.
The VulcanForge hack is worth noting because, like many new tokens, PYR is traded on a decentralized exchange. The decentralized exchange runs on smart contracts, and because there is no centralized order book, investors use user-contributed funds to trade with the “liquidity pool” and receive “collateral” rewards in return. This also means that there is no central authority to blacklist malicious accounts trying to cash stolen funds.
Since the hacking, VulcanForge has advised users to remove their liquidity to make it difficult or impossible for attackers to cash out.As Block report, So far, hackers have managed to cash out most of the tokens in a small transaction, although the price of PYR is not without falling into a downward spiral due to selling pressure. On Discord, every half an hour there will be a robot message asking the user: “Anyone who has an LP in uniswap or quickswap delete it as soon as possible.”
Have you researched the vulnerabilities of cryptocurrencies and their networks? We would be happy to hear from you. You can securely contact Lorenzo Franceschi-Bicchierai via Signal, phone +1 917 257 1382, Wickr/Telegram/Wire @lorenzofb, or send an email to lorenzofb@vice.com
Discord’s VulcanForge staff claimed Monday morning that the centralized exchange (CEX) had been notified of the hacker attack. “All CEXs we work with are tracking the address and flow of funds. Funds will be seized by the exchange after deposits,” the staff member said.
On Monday, the company Say in tweet It has refunded most of the stolen PYR and claimed that it has “quarantined” all tokens stolen on centralized exchanges. “Those who know [sic] VF history, know [sic] This will only make us stronger,” the company Wrote in another tweet.
VulcanForge did not respond to an email requesting comment on how the hack occurred.
Subscribe to our cybersecurity podcast, The internet. Subscribe Our new Twitch channel.
