NFT game Munchables, which is on recently launched Ethereum Layer 2 Blast, lost $62 million last night in an exploit. But early this morning the team had good news for its community: "All funds are safe."
All user funds are safe, lockdrops will not be enforced, all blast related rewards will be distributed as well. Updates to follow in the coming days. https://t.co/ZukNfTFTWf
Very early this morning, the Munchables team said on Twitter that a developer attached to the project had "agreed to share the keys for the full Munchables funds without any condition." The wording in the team's message and another by Blur and Blast founder, Tieshun Roquerre, seems to confirm that the exploit was carried out by an insider who worked on the game.
Within an hour of the tepidly good news, the Munchables account said the developer had "shared all private keys involved to assist in recovering the user funds. Specifically, the key which holds $62,535,441.24 USD, the key which holds 73 WETH, and the owner key which contains the rest of the funds."
$97m has been secured in a multisig by Blast core contributors. Took an incredible lift in the background but I’m grateful the ex munchables dev opted to return all funds in the end without any ransom required. @_munchables_ and protocols integrating with it like @juice_finance…
Not long after, it appeared the Munchables team sent a few test transactions and then moved the $62 million from the exploiter wallet into a multi-signature wallet.
Alleged Munchables exploiter wallet transactions on BlastScan.io.
Roquerre, who goes by Pacman on Twitter, warned that Munchables and "protocols integrating with it like @juice_financewere affected." Juice Finance is a points farming protocol to help users maximize their yield and eligibility for airdrops across the Blast ecosystem.
But that's not all. There's now fake Munchables accounts in the replies, asking users to check their eligibility to reclaim funds by clicking a link.
Screenshot of a fake Munchables account in the replies on Twitter.
Blast is a Layer-2 scaling solution, like Arbitrum, Optimism, or Coinbase-incubated Base. It has experienced rapid growth after launching its mainnet in February. And as of Wednesday morning, it was the fourth-largest L2 with $2.7 billion worth of total value locked and nearly tied with Base.
What's more, Blast has been gearing up for a $1.3 billion airdrop in May. Earlier this year, the team behind Blast released a guide on how users and developers can earn Blast Points for using or building on the L2.
The growing soccer talk among active crypto traders is not just due to the return of the English Premier League (EPL), but also thanks in large part to Football.fun—a growing on-chain ecosystem that has provided sizable returns to early participants and soccer fans alike.
The newly established protocol built on Coinbase’s Ethereum layer-2 network, Base, allows users to buy shares in their favorite soccer players like Lamine Yamal and Kylian Mbappe across the world’s top professional leagues—lik...
While crypto gaming has long been seen as a key use for blockchain, letting gamers really own and freely trade their unique items and perhaps profit from a game's success, developers are struggling to sustain their games and digital economies.
Some games, like Gunzilla Games’ Off the Grid, have punched through to a broader audience, gaining adoption from top streamers and gamers alike—albeit ahead of full blockchain integration. But many other games and studios building with tokens are strugglin...
Candy Crush Saga’s glossy, streamlined take on match-3 puzzling has racked up more than 1 billion mobile downloads—and now the formula is getting a fresh crypto spin with the launch of Sugar Match, a game built on the Tezos layer-2 network, Etherlink.
The iOS and Android game, built by Sugar Gaming Studios, aims to differentiate itself from other match-3 games—puzzle games that task users with moving objects to connect and clear three or more like items—with its competitive player-versus-player...
