JUST

Arbitrum

ZachXBT

Galxe

<p>On October 6, the Web3 community platform Galxe suffered a DNS hijacking incident, which sent shockwaves through the digital asset ecosystem. The malevolent act saw the platform’s official website temporarily commandeered by nefarious actors, who diverted unsuspecting users to a phishing site with sinister intentions of pilfering funds​.&nbsp; The platform’s team promptly cautioned users against accessing the site to avoid falling victim to this scam.</p> 
<p>At 14:44 UTC, the Galxe platform realized its official website was offline. Upon further scrutiny, the team discerned a grave security breach affecting its Domain Name System (DNS) record. They swiftly acknowledged the breach and cautioned users against visiting the domain until they rectified the situation. About 40 minutes later, they confirmed the unfortunate incident to their community​.</p> 
<p>The fallout from the DNS hijack was immediate and financially draining. Crypto sleuths such as ZachXBT quickly identified that an address linked to the hacker was accumulating funds from Galxe users.&nbsp;</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Stolen funds are being directed to here<br><br>0x4103baBcFA68E97b4a29fa0b3C94D66afCF6163d<br><br>It seems to likely be the same scammer who did the Balance frontend attack recently. <a href="https://t.co/SovOGGn8GE" rel="nofollow" target="_blank">pic.twitter.com/SovOGGn8GE</a></p>— ZachXBT (@zachxbt) <a href="https://twitter.com/zachxbt/status/1710308430991286513?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">October 6, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>At 17:15 UTC, the ill-gotten gains hovered around the $160,000 mark, revealing the enormity of the crisis at hand. Moreover, evidence surfaced linking this malicious activity to a similar DNS hijack on the Balancer decentralized exchange on September 20, hinting at a pattern of targeted DNS attacks within the crypto community.</p> 
<p>The gravity of the situation exacerbated as the website came back online, with some users still reporting unauthorized fund transfers. The hacker seemingly exploited a smart contract across various networks, including Ethereum, Optimism, and Arbitrum, among others, exhibiting a high level of sophistication and understanding of the crypto space​.</p> 
<p>The Galxe incident is part of a worrying trend, as Web3 projects have been increasingly targeted by hackers. A report from security platform Immunefi highlighted a dramatic rise in attacks on these projects, with losses amounting to approximately $686 million in Q3 2023 alone.</p> 
<h2 class="wp-block-heading" id="community-reactions">Community reactions</h2> 
<p>Post-incident, Galxe’s spokesperson relayed a message to the public, assuring them that steps were being undertaken to bring the website back online safely. The spokesman stated that around 9 a.m. PST on October 6, domain ownership of the site had been reclaimed, and security measures were enhanced with the assistance of domain registrar service Dynadot. Additionally, the spokesperson said that the team liaised with law enforcement authorities to investigate the matter further and prevent such occurrences in the future.&nbsp;</p> 
<p>It is important to know that despite the update from Galxe, some users expressed dissatisfaction.&nbsp; One user claimed that their wallet got hacked despite the announcement that the site has fully recovered.&nbsp;</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">SHUT THE HELL UP MAN I THOUGHT THE SITE IS ALREADY REVOKED THE HACKERS ADDRESS I JUST SIGNED IN TODAY WALLET GOT DRAINED WHAT A JOKE <a href="https://twitter.com/Galxe?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">@Galxe</a> NEVER USING GALXE AGAIN <a href="https://t.co/9sxWIhZ5mQ" rel="nofollow" target="_blank">pic.twitter.com/9sxWIhZ5mQ</a></p>— Borat9 (@OxBorat999) <a href="https://twitter.com/OxBorat999/status/1710876856201990517?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">October 8, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">My Space is still not showing up?</p>— ⚜️ WTF TOKYO "24h Freemints" ⚜️ (@wtf_tokyo_jp) <a href="https://twitter.com/wtf_tokyo_jp/status/1710924215963333079?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">October 8, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>Galxe is a platform built on web3 technology that enables developers to utilize digital credential data and NFTs (non-fungible tokens) to incentivize users for their involvement in a range of crypto-related activities. Participating users can earn customized rewards from projects and developers by attending community events, engaging in governance tasks, or completing incentivized activities.</p>

User backlash sweeps across Galxe community post-DNS hijack

Table of Contents

Cryptopolitan_News

Other articles published on Oct 8, 2023

Elon Musk Wants SEC & DOJ To Go Through A Major Revamp Process

Slovenia is making headlines in the crypto industry— here’s why

FTX Hacker Sends Ethereum Worth $147,000,000 to THORChain – Here’s How Much ETH They Still Own

Mexico Central Bank Leverages XRP Ledger for USD-MXN Transactions

SBF’s trial begins, more layoffs, Israel at war with Hamas, Ripple secures another victory | Week...

Bitcoin bulls encircle $28K as trader says 'big' buyer must step in

Join our free newsletter for daily crypto updates!