{"id":272577,"date":"2024-03-27T18:51:59","date_gmt":"2024-03-27T13:21:59","guid":{"rendered":"https:\/\/dripp.zone\/news\/?p=272577"},"modified":"2024-03-27T18:51:59","modified_gmt":"2024-03-27T13:21:59","slug":"munchables-recovers-62-5-million-in-user-funds-after-exploit-linked-to-north-korean-hacker-crypto-news","status":"publish","type":"post","link":"https:\/\/dripp.zone\/news\/munchables-recovers-62-5-million-in-user-funds-after-exploit-linked-to-north-korean-hacker-crypto-news\/","title":{"rendered":"Munchables recovers $62.5 million in user funds after exploit linked to North Korean hacker – Crypto News"},"content":{"rendered":"

Munchables, a web3 game operating on the Ethereum<\/a> layer-2 network Blast<\/a>, has successfully recovered the $62.5 million it recently lost to an exploit.<\/p>\n

The platform disclosed<\/a> that the attacker voluntarily provided all relevant private keys to facilitate the return of user funds. The keys holding the $62.5 million worth of ETH, 73 WETH, and the main owner key were shared.<\/p>\n

Pacman, the founder of the layer-2 network<\/a>, corroborated<\/a> this development, stating that the hacker returned all stolen funds without demanding any ransom.<\/p>\n

Furthermore, Pacman announced that $97 million had been safeguarded in a multisig account controlled by Blast\u2019s core contributors. These funds will soon be redistributed to Munchables and other affected protocols.<\/p>\n

He added:<\/p>\n

\n

\u201cIt\u2019s important that all dev teams, whether directly affected or not, learn from this and take precautions to be more thorough on security.\u201d<\/p>\n<\/blockquote>\n

The exploit<\/h2>\n

On March 26, Munchables alerted<\/a> the crypto community about an exploit on its platform. On-chain investigator ZachXBT promptly identified<\/a> the address holding the pilfered 17,413 ETH.<\/p>\n

According to ZachXBT\u2019s<\/a> findings, the exploit occurred due to the involvement of a North Korean hacker among Munchables\u2019 core developers.<\/p>\n

Further investigation by ZachXBT showed<\/a> that Munchables had engaged four developers linked to the hacker. Their GitHub usernames were NelsonMurua913, Werewolves0493, BrightDragon0719, and Super1114.<\/p>\n

These four accounts likely belonged to a single individual, as they endorsed each other for the job and financially supported each other\u2019s wallets.<\/p>\n

Solidity developer 0xQuit said<\/a> the hacker executed the exploit by creating a backdoor to allocate a balance of 1,000,000 ETH before upgrading the contract implementation. This enabled them to withdraw once the protocol accumulated a significant balance.<\/p>\n

North Korean hackers<\/h2>\n

This incident sheds light on a common tactic employed by North Korean hackers<\/a> who infiltrate crypto projects as developers and embed backdoors to facilitate future theft.<\/p>\n

Ethereum developer Keone Hon referenced<\/a> an earlier thread outlining signs that a developer might be a North Korean hacker. According to him, these individuals often favor GitHub names such as SupertalentedDev726 or CryptoKnight415, incorporate numbers into their usernames and emails, and use Japanese identities.<\/p>\n

He said<\/a>:<\/p>\n

\n

\u201cIf you see someone with a cringe bio, a bunch of badges, and a bunch of big repos with only 1 commit (due to squashing the history) just be cautious.\u201d<\/p>\n<\/blockquote>\n

The post Munchables recovers $62.5 million in user funds after exploit linked to North Korean hacker<\/a> appeared first on CryptoSlate<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

Munchables, a web3 game operating on the Ethereum layer-2 network Blast, has successfully recovered the $62.5 million it recently lost to an exploit. The platform disclosed that the attacker voluntarily provided all relevant private keys to facilitate the return of user funds. The keys holding the $62.5 million worth of ETH, 73 WETH, and the […]<\/p>\n","protected":false},"author":2,"featured_media":272578,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[274,273,272,244,266,271,268,270,269,267],"class_list":["post-272577","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-de-fi","tag-crypto-finance","tag-decentralized-finance","tag-liquidity","tag-metamask","tag-pancake","tag-slippage","tag-sushiswap","tag-tronlink","tag-trust-wallet","tag-uniswap"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/272577","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=272577"}],"version-history":[{"count":2,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/272577\/revisions"}],"predecessor-version":[{"id":272584,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/272577\/revisions\/272584"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/272578"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=272577"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=272577"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=272577"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}