Token

Cryptocurrency

Nomad

A recent GALA token contract address upgrade opened a loophole for hackers, targeting crypto exchanges with old tokens. 
Cryptocurrency exchanges are at risk of fake top-ups with old <a href="https://crypto.news/price/gala/" target="_blank" rel="noreferrer noopener">GALA</a> tokens as the project’s recent upgrade generated a new contract address for the token. 
<figure class="wp-block-image size-full">
 <img decoding="async" loading="lazy" width="1259" height="333" src="https://crypto.news/app/uploads/2023/09/F51Ybm3aoAA6R09.jpg" alt="Hackers spam crypto exchanges with fake GALA tokens - 17" class="wp-image-14194302">
 <figcaption class="wp-element-caption">
 GALA token balance on Coinhub. Source: X
 </figcaption>
</figure> 
According to an X (formerly Twitter) <a href="https://x.com/x_explore_eth/status/1701629646528557168?s=20" target="_blank" rel="noreferrer noopener">thread</a> published by a crypto security researcher X-explore, there are now two tokens in circulation called GALA, with the price ratio between “old Gala” and “new Gala” set at 1:12. 
The researcher noted hackers had already noticed this flaw and exploited it on Sept. 6 by withdrawing “all GALA” from Coinhub, a Mongolian crypto exchange. As of press time, the exchange made no public statement on the matter. 
 You might also like: <a href="https://crypto.news/buterin-unveils-x-account-hack-stemmed-from-sim-swap-attack/"> Buterin unveils X account hack stemmed from SIM-swap attack </a> 
X-explore said the hacker has been depositing the old GALA tokens on various crypto exchanges since July 27 to test fake top-ups. It is unclear how many other trading platforms are vulnerable to this attack. 
The researcher says fake deposits have always been a “very important security issue” for crypto exchanges, urging platforms to check whether the address of the tokens supporting deposits needs to be updated and whether the logic of judging the assets on account of deposits is wrong. 
Earlier, analysts at SlowMist <a href="https://crypto.news/slowmist-warns-about-fake-deposit-flaw-in-lido-token-contract/" target="_blank" rel="noreferrer noopener">also alarmed</a> the crypto community about a “known operational issue” in the LDO Token contract, saying the flaw has already been exploited on trading platforms without naming them. X-explore <a href="https://x.com/x_explore_eth/status/1701629656125026474?s=20" target="_blank" rel="noreferrer noopener">claims</a> the hackers who have been trying to trick exchanges with the old GALA tokens were also involved in the LDO false top-ups and the Nomad Bridge attack last August 2023. 
 Read more: <a href="https://crypto.news/coinspaid-reveals-how-job-offer-led-to-37m-hack/"> </a>

Hackers spam crypto exchanges with fake GALA tokens

crypto.news

Other articles published on Sep 13, 2023

DOGE Bulls Retreat at Resistance, Oversold Signals Hint Reversal

TopHash: Helping Users Unleash the Power of Crypto Cloud Mining

ETH Price Stable Ahead of the US CPI Data Release

Crypto ahead in fintech investments in France and Germany in 2023: Report

IOTA Price Prediction: Will MIOTA Price Double by October End?

Coinbase expands offerings with web3 wallet for institutional clients

Join our free newsletter for daily crypto updates!