DEFISECURITY

Suspected North Korean hackers infiltrate team long-term, Blast-verified project Munchables hacked for $60 million.

share
Suspected North Korean hackers infiltrate team long-term, Blast-verified project Munchables hacked for $60 million.

Table of Contents

Munchables Hacked for $60 Million

Web3 game platform Munchables, based on Blast, announced in a tweet at 5:37 a.m. on the 27th that the platform had been hacked. The official team is currently tracking the movement of funds and attempting to stop transactions. More information will be updated as soon as available.

Following the incident, Munchables only released this tweet.

Crypto detective ZachXBT promptly revealed the hacker's address 0x…9c5 under the tweet, indicating that the wallet contained 17,411 ETH, valued at up to $62.94 million, making it the largest hack of the year so far.

Munchables Suspected of Employing North Korean Hackers

ZachXBT stated that Munchables fell victim to the hack due to the employment of North Korean developers.

He pointed out that the developer with the Github ID Werewolves0493 was the culprit.

Werewolves0493

Another Incident Involving Blast

SlowMist founder Yu Xian also referenced ZachXBT's investigation, stating that this was the second similar event:

North Korean hackers disguised as core developers and infiltrated the team for a long time, gaining the trust of the entire team, and struck when the time was right... mercilessly. SlowMist will closely follow the progress of the incident.

Munchables was previously selected as a winning project in the Blast ecosystem competition "Big Bang" as shown below. This marks another incident involving a project recommended by Blast officials following the previous exit scam of RiskOnBlast.

First Rug Pull Incident on Blast: Gaming project RiskOnBlast absconds with funds, deletes all social accounts

Update: Munchables Developers Return Private Keys

Blast founder Pacman revealed in a post on the afternoon of the 27th that the "former" Munchables developer had returned all funds and did not request any ransom.

He believes that this incident is a learning opportunity for all development teams to take preventive measures to safeguard security more thoroughly. Blast is assisting the Munchables team in returning funds to users, and more detailed information will be announced later.

He also specifically mentioned researchers Paradigm and ZachXBT for their assistance in this matter.