A gaming platform built on the Blast blockchain has suffered a significant loss, with over 60% of its total asset value compromised due to a major security breach.
The breakthrough was revealed from the Munchables team via a post on the X platform (Twitter) in which they stated:
[The platform of] Munchables was compromised. We actively monitor transactions and take measures to stop them. Additional updates will follow as we gather more information.
According to ZachXBT, a blockchain investigator, the hacker's wallet is contained 17,400 Ethereum (ETH) token worth $62.5 million after the breakout, representing a significant portion of Munchables' Total Locked Value (TVL). ZachXBT also pointed out that the exploit may be related to a North Korean developer that the Munchables team hired.
ZachXBT also revealed that the multiple developers employed by Munchables that are linked to the exploit likely share the same identity. They confirmed this by pointing out that these developers, who had referred each other when they applied for the job, often transferred payments to the same deposit addresses and fed each other's wallets.
Four different devs hired by the Munchables team and linked to the exploiter are likely all the same person as they:
>recommended each other for the job
>regularly transferred payments to the same two exchange deposit addresses >funded each others walletsGithub Username… https://t.co/Q0scxp6AxK pic.twitter.com/Pjjo4uKXPE
— ZachXBT (@zachxbt) March 27, 2024
Fortunately, the hacker chose to return the assets and Munchables announced that they have regained access to the compromised funds.
In their statement they claim:
The Munchables developer has provided all relevant private keys to assist in refunding users. This includes the key that holds the $62,535,441.24 as well as 73 WETH along with the owner's key having access to the rest of the funds. All user funds are secure, no locks will be imposed and all rewards associated with Blast will be distributed according to the plan. Further updates will be provided in the coming days.
The Munchables developer has shared all private keys involved to assist in recovering the user funds. Specifically, the key which holds $62,535,441.24 USD, the key which holds 73 WETH, and the owner key which contains the rest of the funds.
— Munchables (@_munchables_) March 27, 2024
There are different perspectives in the cryptocurrency community regarding the adoption of privacy tools.
The US Securities and Exchange Commission (SEC) is poised to take legal action against Robinhood's cryptocurrency business, signaling increased scrutiny of the digital asset market.
The US Department of Justice (DOJ) rocked the crypto world on May 3 with revelations of charges against former executives of Cred, a defunct crypto lending and investment company.
A lawsuit was recently filed against Coinbase and its CEO Brian Armstrong, alleging that investors were misled into buying securities and questioning the legality of Coinbase's business practices.