Solana Game ‘Aurory’ Suffers From $830K Exploitation, Arbitrum Bridge Disables

The Pokemon-like fighting game Aurory on Sunday night allowed the attacker to withdraw 600,000 AURY tokens worth about $830,000. Finally, Aurory's developers disabled the SsyncSpace blockchain bridge that connects the game to Solana and Ethereum's large-scale network Arbitrum.

They reached out to comment, Aurory Executive Producer Jonathan Campeau said Decrypt To resolve the issue, the team is currently working on releasing a global patch for its backend services.

“It was a racial attack on our non-chain marketplace,” Campeau explained. “The user was able to send multiple purchase requests at once, the seller received the money twice and the buyer was paid only once.”

Due to the exploitation of the market place 80% fall Liquidity on the AURY-USDC decentralized Camelot exchange, and the price of AURY. decreased to 17% As of early Sunday, according to CoinGecko, that means approx 830,000 dollars The price of the AURY siphoned is now around $690,000 at the time of writing. After seeing a drop to $0.95 per AURY token, the price recovered to around $1.15.

The Aurory team further explained on Twitter that the marketplace exploit allowed the exploiter to take funds from the wallet of the Aurory developer team and move the tokens to Arbitrum. No user funds or NFTs have been stolen or are currently at risk, according to the studio.

“With the release of Seekers, a lot of eyes have been on us and unfortunately a lot of bad actors have come out and are trying to hack our systems,” Campau said. DecryptReferring to the latest Token seekers The Aurory game expansion was announced last month.

Campau said Aurora's platform had previously been unwittingly audited by a cybersecurity firm called Ottersec. Decrypt.

“This type of attack, from what I've been told, does not fall within their jurisdiction,” Campeau said.

Decrypt Ottersec has been reached for comment.

Like many crypto exploits and attacks, what happened to Aurora could have been prevented, said David Schwedt, COO of Cyber ​​Security Institute Halborn. Decrypt.

“If an attacker was able to exploit the marketplace, theoretically the vulnerability could be identified and blocked,” Schwed argued, noting that third-party auditing alone is not sufficient to maintain high-level platform security.

Once the exploit is fixed, the Aurory team expects to bring the bridge back online “in the coming days.”

This year, Aurori continues to grow its gaming ecosystem with the upcoming Token Hunters on the Epic Games Store. When the studio first launched NFTs on Solana, it extended to arbitration. In JulyTaking a multi-chain approach to the blockchain game.

Edited by Andrew Hayward.