Ronin

Axie Infinity

Tornado Cash

Tornado

On Thursday night, the Axie Infinity co-founder suffered a hack that included a large amount of ETH being withdrawn from the wallet and sent to Tornado Cash. The suspicious activity was revealed by a blockchain investigator, who alerted of the <a href="https://bitcoinist.com/breaking-ripple-falls-victim-to-massive-hack/">compromised</a> whale wallet over the Ronin bridge. 
Related Reading: <a href="https://bitcoinist.com/crypto-heist-hackers-make-off-with-26-million/" target="_blank" rel="noopener ">Massive Crypto Breach: Hackers Extract $26 Million In BTC And ETH From This Exchange</a> 
<h2 style="font-weight: 400;" id="almost-10-million-in-stolen-funds">Almost $10 Million In Stolen Funds</h2> 
Web3 security platform Ancilia was the first to inform of an alleged security breach over the Ronin Bridge. At the time, 2,790 ETH had been withdrawn and deposited to Tornado Cash. 
Aleksander Larsen, one of the Co-Founders of Sky Mavis, Axie Infinity, and Ronin Network, <a href="https://twitter.com/Psycheout86/status/1760837760179380279" target="_blank" rel="noopener nofollow">clarified</a> that neither the Ronin bridge nor the chain had been compromised. 
The Axie Infinity COO suggested that rather than the bridge suffering a security breach, it was a wallet being compromised, and the funds were “tornado cashed.” 
As Larsen pointed out, the funds stolen during most exploits are sent to crypto mixers to “mud” their transaction history and become more challenging to track. Although commonly used by hackers, these tools are created and encouraged to be used for user privacy protection. 
Tornado Cash has suffered extensive <a href="https://bitcoinist.com/coinbase-treasury-letter-opposing-crypto-regulation/">scrutiny from US regulators</a> over the last few years. The mixing service was sanctioned and blacklisted for allegedly failing to “impose effective controls.” 
Larsen assured the community that the Ronin bridge counts with “top security” it’s been through several audits. Additionally, it is set to pause when suspiciously large quantities are being withdrawn to prevent large exploits. 
Later, blockchain investigator PeckShield replied to the Sky Mavis Co-founder, pointing out that a whale wallet was compromised and that now 3,248 ETH, worth around $9.7 million, had been stolen. 
<blockquote class="twitter-tweet" data-width="500" data-dnt="true"> 
 <a href="https://twitter.com/hashtag/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">#PeckShieldAlert</a> It appears a whale wallet has been compromised, &amp; ~3,248 <a href="https://twitter.com/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$ETH</a> (worth ~$9.7m) from the <a href="https://twitter.com/hashtag/Ronin?src=hash&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">#Ronin</a> Bridge was withdrawn and transferred to <a href="https://twitter.com/hashtag/TornadoCash?src=hash&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">#TornadoCash</a> <a href="https://t.co/sRK36BQFDu" rel="nofollow" target="_blank">pic.twitter.com/sRK36BQFDu</a> 
 — PeckShieldAlert (@PeckShieldAlert) <a href="https://twitter.com/PeckShieldAlert/status/1760843091916042439?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">February 23, 2024</a>
</blockquote> 
The heist consisted of over a dozen transactions and involved three different wallets. As the investigator’s post shows, some funds were moved between the criminal wallets before being deposited to Tornado Cash to complicate its tracking further. 
<h2 style="font-weight: 400;" id="axie-infinity-co-founder-personal-addresses-hacked">Axie Infinity Co-Founder Personal Addresses Hacked</h2> 
Some X users were <a href="https://twitter.com/BryanBC81/status/1760846312134885801" target="_blank" rel="noopener nofollow">skeptical</a> of Larsen’s post as they pointed out that, despite the bridge not being compromised, the hacked wallet seemed to be in the Ronin Network Team’s control. 
Jeff ‘Jihoz’ Zirlin, one of Axie Infinity’s co-founders, announced on X (former Twitter) that the compromised wallets were two of his addresses and, as such, they were not related to the Ronin chain. 
The exploit occurred due to “leaked keys,” Zirlin pointed out, unrelated to operations at Axie Infinity’s creator company Sky Mavis. He also explained that the hack did not affect the validation or operations of the Ronin chain. 
<blockquote class="twitter-tweet" data-width="500" data-dnt="true"> 
 This has been a tough morning for me.&nbsp; 
 Two of my addresses have been compromised. 
 The attack is limited to my personal accounts, and has nothing to do with validation or operations of the Ronin chain. 
 Additionally, the leaked keys have nothing to do with Sky Mavis operations.… 
 — Jihoz.ron <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f98c.png" alt="🦌" class="wp-smiley" style="height: 1em; max-height: 1em;"> (@Jihoz_Axie) <a href="https://twitter.com/Jihoz_Axie/status/1760845078757511562?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">February 23, 2024</a>
</blockquote> 
The Axie Infinity co-founder echoed Larsen’s affirmation about the chain’s security. Zirlin assured that strict security measures are implemented for all chain-related activities. Notably, AXS price didn’t seem to be affected by the exploit news. 
In the post, Zirlin took the chance to express his gratitude to those who reached out to him during the difficult time. Promising to “keep pushing forward with every one of you on this magical journey” to bring “economic freedom to all internet users, starting with gamers.” 
Hackers have targeted important figures within the blockchain and crypto sphere in the last month. A similar instance occurred on January 31 when Ripple made the headlines. Firstly, it was reported on X that an alleged Ripple hack stole over 213 million XRP worth $112.5 million, which negatively affected the token’s price momentarily. 
It was later revealed that the personal addresses of Ripple’s co-founder Chris Larsen saw the unauthorized withdrawal of funds. It’s worth noting that part of the stolen funds was tracked and <a href="https://bitcoinist.com/binance-aids-recovery-xrp-retrieval-still-ongoing/">recovered</a> by the Binance Team briefly afterward. 
<img loading="lazy" decoding="async" class="size-large wp-image-283361 aligncenter" src="https://bitcoinist.com/wp-content/uploads/2024/02/AXSUSDT_2024-02-23_13-30-53.png?w=980&amp;resize=980%2C496" alt="AXS, AXSUSDT, Axie infinity" width="980" height="496" srcset="https://bitcoinist.com/wp-content/uploads/2024/02/AXSUSDT_2024-02-23_13-30-53.png?w=1023 1023w, https://bitcoinist.com/wp-content/uploads/2024/02/AXSUSDT_2024-02-23_13-30-53.png?w=640 640w, https://bitcoinist.com/wp-content/uploads/2024/02/AXSUSDT_2024-02-23_13-30-53.png?w=768 768w, https://bitcoinist.com/wp-content/uploads/2024/02/AXSUSDT_2024-02-23_13-30-53.png?w=980&amp;resize=980%2C496 980w, https://bitcoinist.com/wp-content/uploads/2024/02/AXSUSDT_2024-02-23_13-30-53.png?w=750 750w" sizes="(max-width: 980px) 100vw, 980px" data-recalc-dims="1">

3,248 ETH Stolen In Axie Infinity Co-Founder Hack – Here Are The Details

Table of Contents

Bitcoinist

Other articles published on Feb 24, 2024

Waves Crypto Eyes $3 Level as Bulls Keep Showing Up on Saturday

METALSWAP KNOWLEDGE - METALSWAP IN RWA TREND

The DeFi Tokens That Are Revolutionizing the Crypto Market

Curve Finance Expands DeFi Offerings with New Lending Contracts

Immutable Crypto Aims a Firm Footing Near $3 Level: What’s Next?

Riot Platforms Records 19% Surge in Bitcoin Mining in 2023

Join our free newsletter for daily crypto updates!