Cointime

Cointime

Download App
iOS & Android

Tales of Elleria GameFi Project on Arbitrum One Suffers Over $280,000 Loss in Exploit

Cointime Official

April 20 (Cointime) - Tales of Elleria, an immersive three-dimensional role-playing GameFi project built on Arbitrum One, has experienced an exploit, resulting in a loss of over $280,000 USD, its co-founder Wayne @crwy__ revealed on Twitter.

According to Wayne, the hacker generated his own signature and withdrew a large amount of $ELM in four transactions from the bridge. The contract used to verify signatures, specifically the ecrecover function, is suspected to have been exploited, allowing the hacker to generate authorization signatures without the private keys. The private keys were only exposed to a few individuals and AWS for backend deployment, and no leak was detected.

The project is asking for help in investigating the incident and assures the Ellerians that appropriate action will be taken to compensate for the loss and move forward.

Read full thread:

2/ The hacker's address: 0xf2cbF39e7668EbB113f2C609BBd6eA1dFCe5d376 He made 4 transactions, withdrawing an incremental amount of ELM from the bridge:

1st: https://arbiscan.io/tx/0x411938ac2e40c0c0011187427760c7bf37a3a94606343da2e626d13d8b8e92c8…

2nd: https://arbiscan.io/tx/0x376aaa9b8bdf452ea4bbc4a185e639cf30eff456d96ee117571dcbb6e9cf318c…

3rd: https://arbiscan.io/tx/0x51ec11ef35c4a558c4d266c310f9a643513f46d97a65f8369c2b30ee10e67c8d…

4th: https://arbiscan.io/tx/0x1184e6e0970595572c27242a42e33682d41a3b0e676c269b8da164bd2477f0e2

3/ ecrecover: Potential vulnerability in the contract used to verify signatures: https://arbiscan.io/address/0xe1bBe57b783F619Ff5f3dC575bE6e069bCCe04f5… Current findings suspect that the ecrecover function was exploited and the hacker was able to generate the authorization signatures without our private keys.

4/ Private Keys

We were very careful with the private keys for the signers, and it was only exposed to me, Quack, and to AWS for our backend deployment. We're all nerds and don't spend much time on other stuff other than dev, don't think there was a leak on this side :')

5/ If anybody can help and investigate, we'll appreciate you immensely

We'll be here and will take action appropriately to compensate and move forward. Stay strong Ellerians!

GameFi
Comments

All Comments

Recommended for you

  • U.S. Military Strikes Iran for the 11th Consecutive Night

    On July 22, the U.S. Central Command announced that airstrikes against military targets in Iran began at 7 PM Eastern Time tonight, marking the 11th consecutive night of such actions. The strikes aim to continuously weaken Iran's ability to threaten commercial shipping in the Strait of Hormuz.

  • USD/JPY Breaks Above 163 Level

    On July 21, USD/JPY broke above the 163 level, reaching a new high since 1986, up 0.34% on the day.

  • Moonshot AI Reportedly in Pre-IPO Funding Talks at $50 Billion Valuation

    July 21, market news: Moonshot AI is reportedly in Pre-IPO funding talks at a $50 billion valuation.

  • Crypto Bank Augustus Completes $180 Million Funding Round, Led by Tiger Global

    On July 21, Augustus, a startup building a federally chartered clearing bank, announced it has raised $180 million to expand its dollar payment infrastructure as stablecoins reshape the global financial system. The funding round values Augustus at $1 billion. The round was led by Tiger Global Management, with participation from Hummingbird Ventures, QED Investors, and founders of Nubank, Ramp, Circle, and Deel, among other investors.

  • U.S. Trade Representative Greer Says U.S. Is Preparing New Tariffs

    July 21, according to the Wall Street Journal: U.S. Trade Representative Greer said the U.S. is preparing new tariffs.

  • US-listed crypto concept stocks surge; Circle jumps over 10%

    On July 21, Bitcoin returned to above $66,000, and US-listed crypto concept stocks collectively surged. Circle jumped over 10%, Coinbase rose over 9%, Robinhood gained over 6%, TeraWulf and Strategy increased over 4%, while Riot Platforms and CleanSpark rose over 2%.

  • Kalshi Applies to CFTC for Gold-Linked Perpetual Futures

    On July 21, prediction market platform Kalshi submitted an application to the U.S. Commodity Futures Trading Commission (CFTC) to launch gold-linked perpetual futures. (Jin Shi)

  • Official Meeting Between Interior Ministers of Iran and Pakistan Has Begun

    On July 21, according to the Iranian Students' News Agency, the official meeting between the Interior Minister of Iran and the Interior Minister of Pakistan began a few minutes ago.

  • Beijing: In-depth Implementation of 'AI+' Action Plan in the Second Half of the Year with Special Support Policies for Embodied Intelligence Enterprises

    On July 21, according to the Beijing News, the Beijing Municipal Bureau of Economy and Information Technology announced that in the second half of the year, it will focus on the annual key tasks of building a benchmark city for the digital economy and deeply implement the 'AI+' action plan to fully unleash new momentum for the intelligent economy. The plan aims to advance the comprehensive empowerment of artificial intelligence. It will promote AI-enabled new industrialization, establish R&D and pilot platforms for AI in the industrial sector, and enhance the application level of AI in core industrial production processes. Special support policies for computing power and datasets for embodied intelligence enterprises will be introduced to accelerate the iteration of core technologies such as embodied large models and motion control, leveraging embodied intelligence to drive industrial transformation and improve quality of life. The construction of a national (medical) AI application pilot base will be expedited, linking top-tier hospitals, research institutions, and technology companies to address the bottlenecks in the translation of medical intelligence from the laboratory to clinical application. The application of intelligent translation and simultaneous interpretation in the cultural and tourism consumption sectors will be promoted, expanding the range of languages and achieving hardware-software synergy. Additionally, a non-site intelligent supervision system for food safety will be improved to form a complete regulatory chain of intelligent early warning, remote inspection, and rapid response.

  • Beijing to Establish Token Factories in the Second Half of the Year

    On July 21, the Beijing Municipal Bureau of Economy and Information Technology reported that in the first half of the year, the city's digital economy grew by 7.8%, with the core industries of the digital economy increasing by 9.8%, significantly contributing to the city's GDP growth. In the second half of the year, Beijing will promote comprehensive empowerment through artificial intelligence, advancing applications such as intelligent translation and simultaneous interpretation in the cultural and tourism consumption sectors. The Bureau will focus on the annual key tasks for building a benchmark city for the digital economy, implementing the 'Artificial Intelligence +' action plan, and fully unleashing new momentum for the intelligent economy. Policies for the development of the Token economy will be formulated, focusing on key aspects such as Token production, distribution, and application, with plans to establish Token factories and distribution platforms, promoting innovative applications in key areas such as industry, education, and cultural tourism. An 'Innovate for the Future' OPC special roadshow event will be held to stimulate the creative energy of super individuals in AI applications. High-quality training courses on AIGC aimed at OPC will be developed to unlock the value of AIGC technology. Leveraging the Open Source Chip Research Institute and the Beijing Tongminghu Information Technology Application Innovation Center, a 'RISC-V + AI OS' open-source ecosystem will be created, building a full-stack autonomous technology system from chip instruction sets to operating systems to intelligent applications. (Xinjingbao)

Daily Must-Read

Popular Activities

RaveDAO at Terra Solis by Tomorrowland: A Female-Led Techno Night Where Web3 Culture Converges

RaveDAO at Terra Solis by Tomorrowland: A Female-Led Techno Night Where Web3 Culture Converges

April 30 - April 30
Dubai

Popular Tags

Cointime
News
Contents
RSS
Company