Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Gala Games False top-up

·Historical incident record

Incident Overview

The token GALA of the blockchain gaming platform Gala Games underwent a major upgrade on May 15, 2023, and the token contract address was updated. As a result, there are now two tokens in circulation, both called GALA. The price ratio of old GALA and normal GALA is 1:12. The attacker has been using old GALA tokens to deposit funds on various exchanges since July 27 this year to test fake deposits. At the same time, hackers were also involved in the LDO “fake top-up” incident and the Nomad Bridge attack last August. On September 6, hackers deposited old GALA tokens to CoinHub, successfully causing the exchange to treat the deposited old GALA tokens as normal GALA tokens. Then the hacker user withdrew the real GALA. Now there is only $168 worth of GALA left in the exchange hot wallet, and the hacker earned 2.7 ETH.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodPrivate Key Leakage
    Reported loss$ 21,800,000
  2. Incident date
    Target

    Connext

    Attack methodDoS Attack
    Reported loss$ 39,000
  3. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 815,000
  4. Incident date
    Target

    Haribo

    Attack methodRug Pull
    Reported loss$ 35,400
  5. Incident date
    Attack methodRug Pull
    Reported loss$ 127,000