THE AXIS INFINITY GAME WAS HACKED THROUGH A FICTITIOUS VACANCY AND $625 MILLION WAS STOLEN

THE AXIS INFINITY GAME WAS HACKED THROUGH A FICTITIOUS VACANCY AND $625 MILLION WAS STOLEN

THE AXIS INFINITY GAME WAS HACKED THROUGH A FICTITIOUS VACANCY AND $625 MILLION WAS STOLEN
Unknown attackers managed to steal $ 625 million, taking advantage of the credulity of the engineer Sky Mavis, who developed the computer crypto game Axie Infinity. The employee received an offer of employment from a ghost company through a specialized social network.

After downloading a pdf file with a job offer, a program was introduced into the game system that allowed hacking and theft of a large sum. The blockchain of the game was attacked in March 2022, funds were stolen in digital currency.

Later, the US authorities linked the incident to the activities of the North Korean hacker group Lazarus, but the details of the investigation were kept secret. According to the publication The Black (the black.co ), rarely has a vacancy brought such unpleasant consequences as in the case of the largest hacking that occurred due to the fault of one of the company's engineers.

A computer game that allows users to earn cryptocurrency in the process of trading NFT was very popular among residents of Southeast Asia. In November 2021, 2.7 million participants used the game daily. The trading volume reached $214 million per week.

It is reported that the main purpose of the hacker program were validators that allow you to create transaction blocks.

The hackers managed to immediately capture 4 of the 9 validators, but to withdraw funds, the hackers needed control over the fifth validator.

The Xia DAO autonomous player support system was used to complete the hack. Sky Mavis was on the "white list" of organizations after it turned to the DAO in November 2021 for help in conducting a significant number of transactions. The attackers took advantage of this.

In April 2022, the firm will increase the number of validators to 11. In the future, their number is planned to increase to one hundred. The developer also raised $ 150 million, which is planned to be spent on compensation for victims of malware.

Photo: Technology photo created by freepik - ru.freepik.com


08.07.2022