“The latest move announced is a $1 million bug bounty program that invites white hat hackers to stress test the blockchain.Ĭo-Founder and COO of Sky Mavis and Axie announced: “Calling all whitehats in the blockchain space. After the breach happened, NewsBTC reported on Axie Infinity and Sky Mavis’ first solution to the problem :
Let’s turn to archival material to complete the story and add extra detail. This resulted in 173,600 Ethereum and 25.5M USDC drained from the Ronin bridge in two transaction”ĭid Lazarus’ operators orchestrate such a Hollywoodesque attack? Or does the comedic modus operandi implicate other perpetrators?ĪXS price chart on FTX | Source: AXS/USD on Previous Coverage Of The Axie Infinity/ Ronin Hack “The attacker managed to get control over five of the nine validator private keys - 4 Sky Mavis validators and 1 Axie DAO - in order to forge fake withdrawals. The Ronin bridge’s operators’ post-mortem on the attack describes the fallout. Once upon a time, “the Axie DAO allowlisted Sky Mavis to sign various transactions on its behalf.” The permissions were still valid and the hackers took advantage of them.
To complete the attack, they took control of another entity. From there, hackers were able to attack and take over four out of nine validators on the Ronin network - leaving them just one validator short of total control.”
#Block story hacked pdf
“The fake “offer” was delivered in the form of a PDF document, which the engineer downloaded - allowing spyware to infiltrate Ronin’s systems. He opened up Pandora’s box and all hell broke loose. “Earlier this year, staff at Axie Infinity developer Sky Mavis were approached by people purporting to represent the fake company and encouraged to apply for jobs, according to the people familiar with the matter.”Īfter several rounds of interviews, one of Sky Mavis’ developers got an extremely generous offer. Does The Block’s article complete or negate this version of the story? It’s hard to see North Koreans pulling a stunt quite like this. The alphabet agency traced the funds to wallets associated with North Korean hacking group Lazarus. And according to the FBI, they’re responsible for the Axie Infinity/ Ronin hack. Is North Korea To Blame?Īccording to surveillance firm Chainalysis, North Korea-sponsored hackers stole over $400M in 2021 alone. And one of its programmers apparently fell victim to the simplest social engineering trick in the book. Sky Mavis is the studio behind Axie Infinity. Both a billion-dollar business and a fun app with a thriving internal economy and an international audience, the play-to-earn game was one of the bull market’s biggest success stories. The Ronin Network is an Ethereum sidechain that exclusively serves Axie Infinity.
Unbelievable that a $622M hack started that way. That’s not all, apparently, the hackers’ spyware got into the system through a simple. “A senior engineer at Axie Infinity was duped into applying for a job at a company that, in reality, did not exist,” The Block reports. Especially considering the FBI claims a North Korea-sponsored hacking group is responsible for it. The latest report on the Axie Infinity/ Ronin bridge hack is too good to be true.
0 kommentar(er)
