The operators of cryptocurrency play-to-earn sport WonderHero have disabled the service after hackers stole about $320,000 value of Binance Coin (BNB).
The assault brought about the worth of WonderHero’s personal coin, WND, to plummet more than 90%.
WonderHero is one in every of many common video games the place gamers earn income in cryptocurrencies and NFTs by gameplay. The platform at present has about 11,000 energetic customers.
However on Thursday morning, blockchain evaluation agency PeckShield notified the corporate {that a} hacker was exploiting the platform. WonderHero shortly disabled the sport and its web site earlier than telling customers it was conscious of the worth drop in WonderHero’s coin.
By Thursday afternoon, the corporate released a blog post confirming that the hackers had stolen a complete of 750 BNB after minting 80 million WND. The hackers then sent the 750 BNB to a cryptocurrency mixer referred to as PancakeSwap.
They defined that the assault was on their “cross-chain bridging withdrawal.” A cross-chain bridge – often known as a blockchain bridge – permits individuals to switch tokens, property, good contract directions and knowledge between blockchains. They’ve turn into a ripe target for hackers in recent months and exploits in bridges have led to tens of millions of {dollars} in losses.
WonderHero stated it might work to repair the breach on their cross-chain bridge earlier than auditing the complete system and creating a brand new contract for WonderHero’s coin. They stated they plan to “airdrop” new WND tokens to customers based mostly on a snapshot previous to the assault.
In addition they plan to compensate all liquidity suppliers however stated the timeline for a restoration of companies will probably be introduced at a later date. In addition they stated they’ve plans to create a bug bounty program to determine different vulnerabilities.
“Customers will be assured that their HON, WND, NFT and accounts on Polygon are secure. WonderHero web site, market, sport and different companies will probably be quickly disabled because the workforce works on the rectification,” the corporate stated.
“A snapshot of customers’ property on BNB Chain previous to the assault will probably be taken. WonderHero is dedicated to not simply making the sport enjoyable but in addition holding the property of our gamers secure and we’ll spare no effort in doing so. The workforce will conduct checks and depart no stones unturned.”
The corporate urged customers to not make any trades till the brand new contract has been issued.
On Twitter, several users criticized the corporate, questioning whether or not they’ll cowl the losses of these whose orders got here after the worth of WND tanked.
WonderHero didn’t reply to requests for remark. The assault came about simply weeks after one other play-to-earn cryptocurrency sport, Axie Infinity, was hit with an assault that noticed hackers steal about $625 million in cryptocurrency.