Blockchain platform for issuing “social money” hacked for $ 5.7 million

An unknown person stole and sold “a huge amount” of tokens issued on the Roll Ethereum platform, according to The Block researcher Igor Igamberdiev. The attacker received almost 3,000 ETH (~ $ 5.7 million).

1/5

Two hours ago, someone sold a huge amount of social tokens issued on Roll platform.

As a result, an attacker earned almost 3k ETH ($ 5.7M), of which 700 have already been sent to Tornado Cash.

Most of social token prices dumped as a result. pic.twitter.com/WmdMogBBnd

– Igor Igamberdiev (@FrankResearcher) March 14, 2021

He has already sent 700 ETH to the Tornado Cash mixer.

Roll allows any user to issue their own branded tokens on the Ethereum blockchain. He can use the asset to monetize activity within his community. The platform calls such coins “social money”.

The maximum emission of a token on Roll is 10 million units. The user receives the first 2 million immediately, the rest is released within three years.

The affected address belongs to the platform, so the expert suggested either a compromise of the private key or an insider’s actions. It is not known whether the attacker gained access to other elements of Roll’s infrastructure, the researcher added.

The price of most of the tokens affected by the incident has dropped significantly.

Data: Twitter.

There are a number of little-known coins left in the wallet, which the attacker can still sell, Igamberdiev noted.

Recall that the hacker who hacked the Furucombo DeFi project for $ 14 million in Ethereum and ERC-20 tokens in February also actively used Tornado Cash to withdraw assets.

Earlier, Crystal Blockchain experts noted that over the past 5 years, mixers have become the second most popular output direction for attackers.

Leave a comment