Axie Infinity is a popular game developed by Sky Mavis that allows participants to accumulate cryptocurrency as they play. Its daily active users reached 2.7 million weekly trading volume of $214 million. It was stolen $540 million in cryptocurrency in March, with attackers believed to be from North Korea. According to anonymous sources, North Korean hackers created a fake company to send fake job advertisements through the professional social network LinkedIn. An engineer at Sky Mavis went through multiple rounds of interviews with the fake company, then offered an extremely attractive salary, and the acceptance letter was sent as a PDF file. The engineer downloaded the files that caused spyware to infiltrate the Ronin system on the sidechain used by Axie Infinity, and the hackers then took control of four of the Ronin network’s nine validators, and just one more could take over Ronin completely. Funds can be transferred as long as five out of nine validators approve. But the hackers only took control of four, and they then used the Axie DAO (Decentralized Autonomous Organization) to complete the cryptocurrency heist .
This article is reprinted from: https://www.solidot.org/story?sid=72053
This site is for inclusion only, and the copyright belongs to the original author.