Very disheartening to see and hear these incidence of hacking which is becoming too rampant lately.
I am sure a lot of person doing airdrops must have connected their wallets to this website. And if so, they should revoke asap to keep themselves safe.
Topic: 🚨🚨 Galxe Hacked Warning - page 2. (Read 294 times)
I was quite surprised that Galxe, the center of the web3 airdrop, was hacked.
It is said that if we don't do any activity on galxe or connect wallets to galxe before October 6th then we can be safe, and I personally fortunately did not do any activity on galxe from the beginning of October and I think I am safe from this incident.
They admit this is their mistake and they will reimburse their customers affected by this hack, I think they are well responsible for what happened yesterday.
It is said that if we don't do any activity on galxe or connect wallets to galxe before October 6th then we can be safe, and I personally fortunately did not do any activity on galxe from the beginning of October and I think I am safe from this incident.
They admit this is their mistake and they will reimburse their customers affected by this hack, I think they are well responsible for what happened yesterday.
I don't think though that there should be surprises as
- hackers are everywhere, they are looking for anything that they can exploit
- not blaming Galxe but when they become so huge, maybe they didn't look at this possibility that one day they will be the target.
But the latest news is that they are now taking control and fully recovered and they are trying to make the website more secure. However, it's obviously the damage has been done, many of their customers have lost a lot of their hard earn money. Although there is this "claim losses", we will have to wait for the official word from the team itself.
-I think they were aware of the potential for hacking, but as usual when web developers are blind enough to feel that their work is secure enough, and usually it is very difficult to find weaknesses in security when we work regularly according to procedures, but it must be understood that there must be weaknesses, because nothing man-made is perfect.
Yes in their last announcement on social media platform X they said that for "account recovery/loss claims" wait until they give official notice for that.
Mine was just fine. As soon as I receive the notification from Galxe's X account regarding the hack, I took action immediately of disconnecting my wallet from their website. It's a blessing in disguise about me turning on notifications in Galxe's updates in X, in which I've done my homework.
As I have triple checked everything until today my wallet is healthy. No unauthorized transactions or balance drains happening in it.
The address that was mentioned by Galxe for me to revoke, good thing it was not on my records for authorizing signatures or so.
Make sure that from time to time when we are not using any Dapps, always make a habit of disconnecting and revoking permissions. Web3 still has long ways to go to ensure that this hacking incidents won't happen again.
But stay SAFU and vigilant always as hackers are not stopping to find new ways to infiltrate our hard-earned money.
As I have triple checked everything until today my wallet is healthy. No unauthorized transactions or balance drains happening in it.
The address that was mentioned by Galxe for me to revoke, good thing it was not on my records for authorizing signatures or so.
Make sure that from time to time when we are not using any Dapps, always make a habit of disconnecting and revoking permissions. Web3 still has long ways to go to ensure that this hacking incidents won't happen again.
But stay SAFU and vigilant always as hackers are not stopping to find new ways to infiltrate our hard-earned money.
Luckily I haven't interacted with this using all of my wallet. This is well used platform for those who are airdrop hunters, I wonder if the hack affected those who connected their wallet in the platform
~Snipped
~Snipped
Apparently, not everyone who have at some point in the past interacted with their platform was part of the hack. Revoke.cash already made a tool for users to verify whether their wallets were part of the compromised wallets during the hack: https://revoke.cash/exploits/galxe?chainId=1
Galxe already wrote a post-mortem: https://blog.galxe.com/oct-6th-dns-security-incident-statement-0cfc789bf9dc
It was a Frontend hack that originated with some impersonation and involved some redirection of the website to a phished version and users that interacted with that phished version were the ones that got compromised.
I was quite surprised that Galxe, the center of the web3 airdrop, was hacked.
It is said that if we don't do any activity on galxe or connect wallets to galxe before October 6th then we can be safe, and I personally fortunately did not do any activity on galxe from the beginning of October and I think I am safe from this incident.
They admit this is their mistake and they will reimburse their customers affected by this hack, I think they are well responsible for what happened yesterday.
It is said that if we don't do any activity on galxe or connect wallets to galxe before October 6th then we can be safe, and I personally fortunately did not do any activity on galxe from the beginning of October and I think I am safe from this incident.
They admit this is their mistake and they will reimburse their customers affected by this hack, I think they are well responsible for what happened yesterday.
I don't think though that there should be surprises as
- hackers are everywhere, they are looking for anything that they can exploit
- not blaming Galxe but when they become so huge, maybe they didn't look at this possibility that one day they will be the target.
But the latest news is that they are now taking control and fully recovered and they are trying to make the website more secure. However, it's obviously the damage has been done, many of their customers have lost a lot of their hard earn money. Although there is this "claim losses", we will have to wait for the official word from the team itself.
Luckily I haven't interacted with this using all of my wallet. This is well used platform for those who are airdrop hunters, I wonder if the hack affected those who connected their wallet in the platform. I noticed that airdrop platforms are the one who are being attacked now by the hackers. I've saw on twitter that there are other similar platforms that are hacked and encouraging everyone to revoke the access to their wallet.
This is why we should use other wallet to connect to platforms. This shows how easily our wallet can get wiped if incident like this happen again.
This is why we should use other wallet to connect to platforms. This shows how easily our wallet can get wiped if incident like this happen again.
I was quite surprised that Galxe, the center of the web3 airdrop, was hacked.
It is said that if we don't do any activity on galxe or connect wallets to galxe before October 6th then we can be safe, and I personally fortunately did not do any activity on galxe from the beginning of October and I think I am safe from this incident.
They admit this is their mistake and they will reimburse their customers affected by this hack, I think they are well responsible for what happened yesterday.
It is said that if we don't do any activity on galxe or connect wallets to galxe before October 6th then we can be safe, and I personally fortunately did not do any activity on galxe from the beginning of October and I think I am safe from this incident.
They admit this is their mistake and they will reimburse their customers affected by this hack, I think they are well responsible for what happened yesterday.
Im sorry for those who were losing their money but finally this garbage site is dead. The team looked like very amateur caused by they can't even solve the problem immediately. People shall leave this platform but i guess if majority of hunters were using the empty wallet.
That's why the hacker was not able to farming as much as when they were hacking defi or another platform like exchange site.
It makes me curious to see how there are still thousands of people keep do their farming quests.
That's why the hacker was not able to farming as much as when they were hacking defi or another platform like exchange site.
It makes me curious to see how there are still thousands of people keep do their farming quests.
...Galxe ask to revoke address access. You can check the contract to which you gives permission and easily revoke it using the following website https://revoke.cash/
Hacker address: 0x0000eaab14253e1421aef4F48eE539F2653C0000...
Hacker address: 0x0000eaab14253e1421aef4F48eE539F2653C0000...
Revoke has simplified such verification as much as possible by making a special page to identify the vulnerability of your wallet in various networks - https://revoke.cash/exploits/galxe The official announcement was posted on Twitter - https://twitter.com/revokecash/status/1710677770492129672?s=46&t=Jk8BljH3_YIEKACgPoIgCA
It is very sad that there have been many hacks, especially since Galxe is a platform that is widely used for various communities from other projects connected to them.
No platform is safe, there are still vulnerabilities from them and cannot anticipate if this has happened. When customer funds are lost, will this be fully covered by Galxe?
The wallet address you showed doesn't have any assets in it.
No platform is safe, there are still vulnerabilities from them and cannot anticipate if this has happened. When customer funds are lost, will this be fully covered by Galxe?
Galxe ask to revoke address access. You can check the contract to which you gives permission and easily revoke it using the following website https://revoke.cash/
Hacker address: 0x0000eaab14253e1421aef4F48eE539F2653C0000
Source twitter tweet
So there are two hacker wallets?Hacker address: 0x0000eaab14253e1421aef4F48eE539F2653C0000
Source twitter tweet
The wallet address you showed doesn't have any assets in it.
According to Galxe latest tweet report, they have get access back to the theirs domain..Users further Funds are now safe now however if any wallet gave permission to hacker address then revoke is necessary. Furthermore still avoid wallet connect as still there is lot of protection needed. Website is under maintenance because Galxe team is checking it for security check and other serveral operation.
Galxe ask to revoke address access. You can check the contract to which you gives permission and easily revoke it using the following website https://revoke.cash/
Hacker address: 0x0000eaab14253e1421aef4F48eE539F2653C0000
Source twitter tweet
Numerous hacking incident have occured in this years and still big projects has low protection and there not introduced any Solid security system for these projects. Need a very strong security system to fully minimize the risk of wallet compromisation and site hacking.
Galxe ask to revoke address access. You can check the contract to which you gives permission and easily revoke it using the following website https://revoke.cash/
Hacker address: 0x0000eaab14253e1421aef4F48eE539F2653C0000
Source twitter tweet
Numerous hacking incident have occured in this years and still big projects has low protection and there not introduced any Solid security system for these projects. Need a very strong security system to fully minimize the risk of wallet compromisation and site hacking.
For those who don't know about this platform "Galxe is web3 based platform which offer projects to connect with audience. As far I know this is biggest platform which has partnerships with almost all big projects including Optimism, Arbitrum, Layerzero and many others. People use it to claim airdrop/NFT/Oat/Whitelist.
Yes last year I used to claim free NFT here from one project, I stopped doing this claim because I cannot keep up with thousands of those who wants to claim I always ended getting nothing I disconnect my wallet here to stop the notification of a new NFT to claim, this platform is huge, there thousands of connected wallet here.
This is the risk of connecting your wallet in a platform be sure to use new wallet if you're going to connect it to a contract based platform, you never know what's going to to happen, hackers are very active in targeting big platform like Galxe.
Galxe has been hacked and scammer hacked big money and still website is nit recovered. If you have connected your wallet, instantly disconnect wallet and removed all approvals.
🚨 Attention Community! At the moment, the Galxe website is down and we're working on repairing the issue. Please do not connect your wallet to Galxe for the timebeing.
The issue will be resolved shortly, thank you for your patience!
Source:
https://twitter.com/Galxe/status/1710305141016944654?s=19
Hacker Wallet address:
https://debank.com/profile/0x4103babcfa68e97b4a29fa0b3c94d66afcf6163d/
So far hacked 150k$
For those who don't know about this platform "Galxe is web3 based platform which offer projects to connect with audience. As far I know this is biggest platform which has partnerships with almost all big projects including Optimism, Arbitrum, Layerzero and many others. People use it to claim airdrop/NFT/Oat/Whitelist.
Quote
🚨 Attention Community! At the moment, the Galxe website is down and we're working on repairing the issue. Please do not connect your wallet to Galxe for the timebeing.
The issue will be resolved shortly, thank you for your patience!
Source:
https://twitter.com/Galxe/status/1710305141016944654?s=19
Hacker Wallet address:
https://debank.com/profile/0x4103babcfa68e97b4a29fa0b3c94d66afcf6163d/
So far hacked 150k$
For those who don't know about this platform "Galxe is web3 based platform which offer projects to connect with audience. As far I know this is biggest platform which has partnerships with almost all big projects including Optimism, Arbitrum, Layerzero and many others. People use it to claim airdrop/NFT/Oat/Whitelist.
Jump to: