Crypto industry rattled by hack that stole $63M in tokens

Crypto industry rattled by hack that stole $63M in tokens
It's one of the biggest security incidents of the year.
MAR 27, 2024

The crypto sector suffered one of its biggest security incidents this year after a hacker swiped $63 million from a blockchain-based game.

The game, Munchables, confirmed the incident in a post on X on Wednesday and said it would try to halt the transactions. Blockchain specialists PeckShield indicated the hacker stole 17,400 in Ether tokens — worth about $63 million at current prices. Public data on crypto transactions backed the estimate.

The exploiter appears to have had a change of heart, however, and returned the funds in full later the same day, according to blockchain data. Munchables declared “all user funds are safe,” in a post on X at around 2:30 p.m. Singapore time, adding in a separate post that the hacker had not insisted on any conditions. 

Munchables is built on Blast, a so-called Layer 2 that promises more efficient transactions than established blockchains as well as airline-like loyalty points. 

Blast’s founder, Tieshun Roquerre, who goes by the pseudonym Pacman, hailed the “incredible lift” required to secure Munchables’ funds after today’s exploit, in a post on X at 2:20 p.m. Singapore time. He added that “the ex Munchables dev opted to return all funds in the end without any ransom required.”

It seems @_munchables_ lock contract has an issue, which was exploited to drain 17.4K ETH ($62.3M) to the following address: https://t.co/SvddMitdNJ https://t.co/GZsPPO2VHt pic.twitter.com/7fFEEyPSaZ

— PeckShield Inc. (@peckshield) March 26, 2024

Gamers in Munchables try to earn rewards by looking after, or farming, bug-eyed digital creatures. Earlier this week the project said the value of crypto tokens held in the protocol had topped $80 million.

The security incident triggered a flurry of unsubstantiated speculation that a rogue developer or even North Korean hackers were to blame.

The number of North Korean-linked hacks of crypto platforms hit a record high in 2023, though the actual amount of funds stolen — slightly more than $1 billion — dropped around 40%, based on data from blockchain sleuths Chainalysis Inc.

The Lazarus Group, a North Korean hacking unit, infamously stole around $600 million from the blockchain underpinning Axie Infinity, once one of the sector’s most popular games. 

Security exploits overall cost the digital asset industry about $1.8 billion last year, down around 50% from 2022, according to Immunefi, a platform offering bounties to researchers who spot security flaws in crypto software. 

Latest News

Fintech bytes: Envestnet reaffirms $1B RIA commitment with Tamarac tech investment
Fintech bytes: Envestnet reaffirms $1B RIA commitment with Tamarac tech investment

Also, Orion has added BlackRock, Fidelity, and Vanguard to its custom portfolios suite, and RedBlack has set up a new headquarters after crossing a trillion-dollar milestone.

RIA moves: Maridea acquires multigenerational practice in Pennsylvania debut
RIA moves: Maridea acquires multigenerational practice in Pennsylvania debut

Also, New York-based Legacy Edge Advisors names its first-ever CEO, while Novare Capital Management hires a Vanguard veteran with a multigenerational planning focus.

Private equity eyes 401(k) plans, but fees remain a hurdle
Private equity eyes 401(k) plans, but fees remain a hurdle

Asset managers are racing to bring private market products to retirement plans, but cost and liquidity concerns linger.

IRS floats proposal ending tax breaks for schools that weigh race
IRS floats proposal ending tax breaks for schools that weigh race

Treasury's latest tax-exemption crackdown on private schools lands in the wake of a separate push to restrict refundable credits for some immigrant filers.

Trust over tech:  The hidden signal of stock success in the AI era
Trust over tech: The hidden signal of stock success in the AI era

Workforce trust measures predicted which companies came out ahead during COVID-19. The same dynamic may now be playing out across the AI transition — and the data suggests the spread could be just as wide.

SPONSORED Direct indexing webinar targets tax-loss harvesting amid market swings

Northern Trust’s Ken Lassner shows advisors how to convert volatility into after-tax portfolio gains

SPONSORED Who builds the income when the pension disappears?

Dan Biagini of American Equity says the steady decline of pensions, longer lifespans and a reset in interest rates are rewriting how advisors build retirement income