14/02/2024 PlayDapp exploit continues into 4th day, with losses reaching $290M

The South Korean NFT and game development platform apparently suffered a private key leak that hackers used on Feb. 9.

PlayDapp exploit continues into 4th day, with losses reaching $290M

PlayDapp announced just before 11:00 am UTC on Feb. 13 that it had halted its smart contract to take a screenshot for migration as the hack against the South Korean Web3 game development platform and nonfungible token (NFT) marketplacecontinuedinto the new week. The problem was first noticed on Feb. 9.

Blockchain security firm PeckShieldnoticed an apparent private key leakat PlayDapp after 200 million of its native PLA tokens, worth $31 million at the time, were minted. “It seems that deployer’s address has been compromised and attacker’s address is added as a minter,” fellow blockchain security firm Cyvers Alertsexplainedin a Feb. 9 X post.

On Feb. 10, PlayDapp posted a message on X addressed to the hacker,offeringa reward for the return of the stolen contracts and assets and threatening to contact law enforcement, including the United States Federal Bureau of Investigation, if no response is received. PlayDapp’s customer servicewasdown between Feb. 9 and 12.

According to an Elliptic blog post, the rewardofferedwas $1 million if the contracts and assets were returned by Feb. 13; otherwise, it would put a bounty of the same amount on the hacker. Wallets associated with the hack were being labeled, Elliptic added. After the deadline passed, PlayDappsaidon Medium that it was working with blockchain analytics and security firms, centralized exchanges and law enforcement to counteract the damage from the hack.

Elliptic also said 1.59 billion more PLA, worth $253.9 million at the time, was minted on Feb. 12. The hackers may have trouble selling the illicitly minted tokens, however, since the total supply of PLA before the hack was only 577 million.

Happy Lunar New Year#web3

Enter the Year of the dragon with joy and unity
Let's set intentions and unlock potential together!

May the Lunar New Year bring laughter, abundance, and endless possibilities
Wishing you joy and prosperity!$PLA#crypto#gamedevpic.twitter.com/IFHNsvOK9u

— PlayDapp (@playdapp_io)February 9, 2024

The value of PLA sank from $0.1823 with $2.83 million in 24-hour trading volume toward the start of Feb. 9 to $0.1482 with $60.17 million in volume at the time of writing. The current value represents a slight rise from a low of $0.1420 earlier in the day, according to CoinMarketCap.

PlayDappintroduced the Along with the Godsplay-to-earn game on the Polygon blockchain in 2021. That game service wasshut down for being “unsustainable” in May 2023, but NFTs from the game are still available on the PlayDapp website.

Arts

https://cointelegraph.com/news/playdapp-exploit-continues-4th-day-losses-reaching-290-million