Акси Бесконечность проигрывает $620 Миллион после того, как хакер скомпрометировал валидаторы Ronin

Акси Бесконечность проигрывает $620 Миллион после того, как хакер скомпрометировал валидаторы Ronin

According to Sky Mavis, the creators of the blockchain NFT game Axie Infinity, the Ronin network has been attacked, and a hacker has managed to siphon 173,600 in ethereum and 25.5 million usd coin (USDC). The attacker has obtained roughly $620 million worth of crypto assets, and the Ronin bridge and Katana Dex have been paused.

The Largest NFT Blockchain Game Axie Infinity Suffers From a $620 Million Hack

The largest non-fungible token (NFT) игра с блокчейном, Axie Infinity, has suffered from an attack on Tuesday after the Ronin network validators were compromised. Sky Mavis, the company behind the Axie Infinity project, explained that the validators were compromised as early as March 23.

The funds were drained in two transactions (transaction 1 and transaction 2) and Sky Mavis discovered the attack after a user complained that they could not withdraw 5,000 ether from the Ronin bridge.

The attacker used hacked private keys in order to forge fake withdrawals,” Sky Maviss post mortem statement discloses. While the Ronin bridge and Katana Dex has been halted, Sky Mavis also said: “We are working with law enforcement officials, forensic cryptographers, and our investors to make sure all funds are recovered or reimbursed. All of the AXS, RON, and SLP on Ronin are safe right now.

The team further explained that the project uses nine validator nodes to run Ronin, and in order to deposit or withdraw, five out of nine are needed to process a transaction.

The attacker managed to get control over Sky Maviss four Ronin Validators and a third-party validator run by Axie DAO,” Sky Mavis said. “The validator key scheme is set up to be decentralized so that it limits an attack vector, similar to this one, but the attacker found a backdoor through our gas-free RPC node, which they abused to get the signature for the Axie DAO validator.

Whats worse is that Sky Mavis notes that the attacker got away with it because of a change made back in November 2021, and they discontinued theAxie DAO allowlistedscheme the very next month.

Однако, в “allowlist access was not revokedthe team said, and Sky Mavis added thatonce the attacker got access to Sky Mavis systems they were able to get the signature from the Axie DAO validator by using the gas-free RPC.Sky Maviss post mortem continued:

We have confirmed that the signature in the malicious withdrawals match up with the five suspected validators.

The attack against Ronin is one of the largest hacks against a crypto protocol this year, as it surpassed the атака against the Wormhole bridge. That specific attack against the Wormhole bridge saw the loss of $320 миллион, but the funds were replaced by Jump Crypto. Sky Mavis explained on Tuesday that the team is working with law enforcement in order toensure the criminals get brought to justice.

Более того, the team is in the process of discussing with stakeholders and talking about how to make sure users are compensated. “Sky Mavis is here for the long term and will continue to build,” команда’s post mortem concludes.

What do you think about Axie Infinity losing $620 million to someone who found a validator exploit? Дайте нам знать, что вы думаете об этом предмете в разделе комментариев ниже.