🚨 Galxe has been hacked - page 2.

dbshck

staff

Activity: 2440

Merit: 1616

Crypto Swap Exchange

I was doing the Arbitrum Odyssey on Galxe just 2 hours prior to the DNS attack. Had I been active a few hours later, I might have been one of the victims too Cry

. Stay safe everyone

Quote from: nelson4lov on October 06, 2023, 06:23:26 PM

Too bad for the Galxe team. So far, are there any leads of the reason Galxe was compromised? I have revoked all access to their website. Last time I used the protocol was a couple of months ago.

It was a DNS attack similar to what Balancer had a few weeks ago. So the cause is likely similar as well, a social engineering on their domain registrar.

nelson4lov

hero member

Activity: 2030

Merit: 789

Top Crypto Casino

Too bad for the Galxe team. So far, are there any leads of the reason Galxe was compromised? I have revoked all access to their website. Last time I used the protocol was a couple of months ago.

Quote from: MAAManda on October 06, 2023, 04:40:11 PM

Even if it was at $500K I'm sure they could still return the money to their users, don't know if this will continue or not, but the

I'm not sure what their business model is but the Galxe team is a beneficiary of some of the grants offered by L2 projects like Arbitrum, etc so definitely they can cover "legitimate" from users.

MAAManda

hero member

Activity: 1484

Merit: 706

Quote from: ryzaadit on October 06, 2023, 02:53:59 PM

Checking the comment, most of the time is only troll comment with big amount $ and hoping they got a refund Grin

the total being hacked based on the information in comments is around 150K$. Based on the total number of visitors and users of Galxe is really small.

I'm sure they still can refund with these numbers.

Even if it was at $500K I'm sure they could still return the money to their users, don't know if this will continue or not, but the last interaction on the hacker wallet was 44 minutes ago. The hacker has also moved a large balance worth 31.3 $ETH to another wallet.

Quote from: OmegaStarScream on October 06, 2023, 03:51:43 PM

@MAAManda AFAIK, that error message would've only shown to MetaMask users. I'm just guessing here, but I don't think the users of other wallets (Exodus, Trustwallet, SafePal, etc.) would've gotten that.

Confirmed, Exodus users won't get that warning message, it looks like it's really a special message for MetaMask users.

Hacker wallet: https://etherscan.io/address/0x4103babcfa68e97b4a29fa0b3c94d66afcf6163d | BSC | FTM | Crono

OmegaStarScream

staff

Activity: 3472

Merit: 6129

As mentioned by ryzaadit, It looks like there is indeed a recovery plan (TBA). The team also managed to gain control over the domain[1].

@MAAManda AFAIK, that error message would've only shown to MetaMask users. I'm just guessing here, but I don't think the users of other wallets (Exodus, Trustwallet, SafePal, etc.) would've gotten that.

[1] https://metamask.github.io/phishing-warning/v2.1.0/#hostname=galxe.com&href=https%3A%2F%2Fgalxe.com%2F

ryzaadit

legendary

Activity: 2450

Merit: 1225

Quote from: OmegaStarScream on October 06, 2023, 12:48:17 PM

I see some people reporting some losses of huge numbers, but not sure if they're just trolling or it's real. Either way, don't use it for now.

They have a recovery plan, let's see how the process of their recovery plan is.

Checking the comment, most of the time is only troll comment with big amount $ and hoping they got a refund Grin

the total being hacked based on the information in comments is around 150K$. Based on the total number of visitors and users of Galxe is really small.

I'm sure they still can refund with these numbers.

MAAManda

hero member

Activity: 1484

Merit: 706

Quote from: OmegaStarScream on October 06, 2023, 12:48:17 PM

For those who are familiar with the platform, and use it on a regular basis to complete tasks for different projects, you should stop using it. Don't connect your wallet, and don't sign any transactions either. It has been hacked as mentioned here.

Currently the website is down and can't be accessed, there's also a warning if you visit the website. many people think that this is just a scam from Galxe to take money from their users accounts, BTW, thanks for the quick information you share in the forum.

Quote from: OmegaStarScream on October 06, 2023, 12:48:17 PM

I see some people reporting some losses of huge numbers, but not sure if they're just trolling or it's real. Either way, don't use it for now.

Some of them are just trolls, but most of them are the truth, I even saw in a comment that hackers also took balances in accounts that only had $4 in them, so it's impossible for them (Hacker) to miss accounts with large balances.

OmegaStarScream

staff

Activity: 3472

Merit: 6129

For those who are familiar with the platform, and use it on a regular basis to complete tasks for different projects, you should stop using it. Don't connect your wallet, and don't sign any transactions either. It has been hacked as mentioned here[1].

I see some people reporting some losses of huge numbers, but not sure if they're just trolling or it's real. Either way, don't use it for now.

[1] https://twitter.com/Galxe/status/1710318639381881280

Topic: 🚨 Galxe has been hacked - page 2. (Read 215 times)