2 entries tagged “exploit”.
On May 20, 2024 an attacker abused a privileged minter account on the GALA token contract to mint 5 billion GALA (≈$200M+ nominal) and dumped ~600M of them for ~$22M of ETH before Gala froze the address. Gala Games called it an internal access-control failure; the attacker later returned the ~$22M.
Dual Russian-Israeli national whom U.S. prosecutors identify as the first person to exploit the Nomad bridge in August 2022 (taking ~$2.89M and triggering the ~$190M free-for-all). Indicted in 2023; arrested in Israel in May 2025 while fleeing under a new name, and approved for extradition.
