Crypto Kingdom Marketcap hits 1,000,000 EUR for the first time in history
(just wanted to say, the project is already 510 realdays old, so it's just 2k per day
- Festina lente! )
Million Euro HackWe are currently investigating what happened, this post will be updated.
Last night our Ultima live DB was accessed by a currently unknown party. The visible result was that the logins did not work.
Since the hashes of the passwords were unchanged from last local backup (proving that they were not messed with), the problem was checked from the hosting provider side, and their live version of the DB (the one you use when playing the game) was found deficient in structure (entire tables were missing with currently unknown reason).
The DB was overwritten from their last daily backup, which restored the functionality. It is now being checked against the local backup.
Crypto Kingdom DB is built on Changelog, which is the record of title changes. It is not possible to change ownership of anything directly by overwriting some values in the DB. All changes must be made as Changelog entries, from which the balances are calculated with a script.
Further, there is no money to be stolen in the DB. It only handles the ingame items. If illegitimate entries are added to the Changelog, they will be found and reversed. Changing the past entries will be nullified by overwriting the changelog from the backup. (A checkpointing system with PoW checksums, not too dissimilar to a blockchain, is in the plans as we grow.)
It is likely that some recent, current Changelog history from the past ~24 hours is lost. We are in the process of finding out if this is the case, and which parts of history cannot be retrieved from any source, and which part of history (if any) is questionable and will not become part of the master.
The game remains playable at the moment, but I'd advise against placing orders and making trades just now, as the integrity of changelog for the last 24 hours is compromised and we do not yet have enough information to make the decision.
It is not known at the moment, if anything that happened was with malicious intent. The structures in CK are designed to
nullify the effect of intrusion (more than
prevent it). In any case, today will show us how easily we can recover from this kind of loss. What is already decided is that in the future, the Changelog processor will send all entries to an offline backup in real-time. If this had been in operation already, this post would not have needed to be written, and no trades records would have been lost.