<p>The post <a href="https://coinpedia.org/news/inside-q1-2024s-largest-hack-playdapps-290-devastating-million-exploit/">Inside Q1 2024s Largest Hack: Playdapp’s $290 Devastating Million Exploit</a> appeared first on <a href="https://coinpedia.org">Coinpedia Fintech News</a></p> 
<p>PlayDapp, one of the most well-known blockchain gaming and NFT platforms based in South Korea and running on the <a href="https://markets.coinpedia.org/ethereum/">Ethereum</a> blockchain, encountered a cunning <a href="https://coinpedia.org/news/crypto-hack-alert-playdapp-in-crisis-as-hackers-loot-290m-in-pla-tokens/">hacker attack</a> that eventually resulted in a loss of assets amounting to a colossal $290 million.&nbsp;</p> 
<p>The incident that took place between February 9th and 12th, 2024 stirred up the crypto community concerning the protection of digital assets and the safe functioning of decentralized platforms.</p> 
<p>Join us as we uncover the intricate details of the largest hack of the year 2024 so far.&nbsp;</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">We are writing to inform you of a critical security incident involving the PLA token contract. The PLA token contract has been hacked and additional PLA tokens have been issued. We understand the gravity of this situation and assure you that we are taking immediate action.</p>— PlayDapp (@playdapp_io) <a href="https://twitter.com/playdapp_io/status/1756060784692736038?ref_src=twsrc%5Etfw">February 9, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<h2 class="wp-block-heading" id="h-it-started-way-before-9th-february"><strong>It started way before 9th February!</strong></h2> 
<p>The <a href="https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1">hacking</a> controversy started on January 16, 2024, when the PlayDapp team received an email that looked like it was from a legitimate partner exchange provider.&nbsp;</p> 
<p>the email became a well-designed phishing trick which resulted in downloading dangerous software onto one of the team’s PCs. Eventually, the thief got the administrator’s private key, which is a serious violation of the whole security system.</p> 
<p>On February 9, 2024, intruders took advantage of the owned private key to acquire unauthorized access to PlayDapp’s smart contract. They had changed them and minted&nbsp; 200 million PLA tokens into their accounts.&nbsp;</p> 
<p>Regardless of the speedy actions taken by the PlayDapp team in trying to inform major CEXs, the hackers succeeded in creating yet another 1.59 billion of PLA&nbsp; on the 12th of February.</p> 
<p>Read Also : <a href="https://coinpedia.org/news/latest-security-breach-hits-arbitrum-hedgey-finance-loses-1-9-million-in-hacker-attack/">Latest Security Breach hits Arbitrum; Hedgey Finance Loses $1.9 Million in Hacker Attack</a></p> 
<h2 class="wp-block-heading" id="h-root-cause-revealed-the-theft-of-private-keys"><strong>Root Cause Revealed the Theft of Private Keys</strong></h2> 
<p>In the root-cause analysis done by the cybersecurity company CYBERONE, it was determined that initial access was granted to the adversary using a domain-spoofed email, which in turn led to the installation of a remote access tool on a team member’s personal computer.&nbsp;</p> 
<p>The hackers gained access to the administrator’s private key and opened the doors for the attacks.</p> 
<h2 class="wp-block-heading" id="h-flow-of-stolen-assets"><strong>Flow of Stolen Assets</strong></h2> 
<p>Although the hackers were able to mint large amounts of PLA tokens, their sales of the assets in return for cash were mostly unsuccessful. The original amount of PLA tokens in circulation amounted to $577 and the hackers were only able to convert $32 out of the stolen amount. The remaining tokens were released through different transactions making the recovery process more complicated.</p> 
<h2 class="wp-block-heading" id="h-response-by-the-playdapp-team"><strong>Response by the Playdapp Team</strong></h2> 
<p>To react to the hack, PlayDapp put out a huge bounty of <a href="https://etherscan.io/tx/0xcb660a82a33480b17527f8c6675e0f43dd875405aee3faffa520e702544f88f2">&nbsp;$ 1 million</a> for the safe return of stolen assets and closed the trading on the PLA token. The offer went in vain as the hacker did not respond positively which made the team extend the bounty to the public.&nbsp;</p> 
<p>The project had already effected a move to a new smart contract that comes with more advanced security features, such as multi-signature functionality and improved permission administration.</p> 
<p>Following these events, the PlayDapp team has undertaken steps to distribute private keys in a decentralized manner, to improve email account security, as well as to install comprehensive antimalware software. The initiative’s goal is to provide the continuity and stability of services not to mention the enhancement of security measures to curb future abuses.</p> 
<p>As of writing, the majority of funds are still with the hacker and the remaining are frozen through exchanges.</p> 
<p>PlayDapp hacking instance represents a palpable demonstration of the long-term risks involved with decentralized platforms and stresses the saliency of carefully designed and rapid security apps in protecting digital assets and user account deposits.</p> 
<p>This Might Interests You : <a href="https://coinpedia.org/research-report/crypto-funding-report-q1-2024-venture-capitalists-show-increased-interest-following-bitcoins-new-ath/">Crypto Hack Report Q1 2024: Trends, Losses, and Recovery Efforts</a></p>

Inside Q1 2024s Largest Hack: Playdapp’s $290 Devastating Million Exploit

Table of Contents

CoinPedia News

Other articles published on Apr 20, 2024

Bitcoin Critic Peter Schiff Issues Warning to BTC Holders as Halving Completes

Trading Sales Volume For Bitcoin NFTs Jump 26% Today After Bitcoin Halving

Pushd’s E-Commerce Presale Offers Stability for Uniswap Investors Amid Crypto Volatility

Buckle Up, Injective (INJ) Primed For Takeoff Towards $50 — Analyst

Proposed Settlement Offers New Path for Crypto Users in Lawsuit Against Sam Bankman-Fried

Helldivers 2: Players Face Tough Choices as New Major Order Threatens Planet Loss

Join our free newsletter for daily crypto updates!