The announcement came as a shock: Axie Infinity, the most popular game play to earn (“we play to win”) was the subject of a hack that will go down in history for a long time: hackers managed to exploit a flaw in the Ronin blockchain, which is the basis of this game. , through two transactions, to divert 173,600then 25.5 million USDC – one whose value is equal to the dollar. In total, this represents the equivalent of $622 million.
Almost a week to detect the hack
Six days passed before Sky Mavis, the publisher of Axie Infinity revealed the pot of roses – the hack happened on March 23 but was not discovered until late. The alleged attacker(s) succeeded in hacking users’ private keys – a combination of 256 sequences of 0 and 1, a code deemed inviolable.
It would seem that the flaw even dates back to November 2021. At that time, due to a very large number of Axie Infinity users, Sky Mavis relied on a validator dubbed Axie DAO and authorized him to sign various transactions on his behalf. However, this access, which was intended to be temporary, had not been completely revoked. It would also seem that the hackers used what is called “social engineering”, that is to say manage to coax a member of a company into talking about things that they is not supposed to be communicated.
A hack of historical value
Present at a conference organized in Los Angeles (NFTLA), the co-founder of Sky Mavis, Jeff Zitlin acknowledged that it was ” one of the most important hacks in history “. It remains that it is the biggest hack of the. The previous record hack dates back to the summer of 2021; it concerned the company Poly Network and the sum stolen had been 611 million dollars. However, these had been returned by the hacker concerned and turned into a job offer as head of security.
Under thecriticism, the founders of Axie Infinity attempted to save face. Jeff Zeitlin felt there was a possibility ” to identify and bring them to justice “. Aleksander Larser, another co-founder of Sky Mavis, certified that the accounts involved would be reimbursed for their losses. And in fact, if the currencies of Axie Infinity, AXS and SLP suffered a relative fall of 7 and 5% respectively, they recovered some suggesting that the episode would be without major consequences on the future of Axie Infinity and Sky Mavis.