DOODIPALS

DESCRIPTION OF EVENTS

DoodiPals is a brand centered around "Doods," fun, energetic characters that spread joy, silliness, and positive vibes. Their motto is to tackle life's challenges with a smile, emphasizing light-heartedness even in the face of adversity. Inspired by the concept of Apeiron, the Doodiverse is an evolving space where fans can engage with a variety of content—ranging from micro-comics and memes to mini-games and animations—created to fit modern, short attention spans. Doods are also part of a broader franchise that includes a token ($DOODi), designed to grow alongside the brand and allow fans to declare their own "Doodiness."

The DoodiPals community is vibrant and ever-expanding, supported by a growing fanbase and a fun, unique culture. Doods are becoming global icons, using humor, cuteness, and playful content to connect with fans across multiple platforms. From the launch of the $DOODi token to the presence of Doodi-themed games like "DOODi Ranch," the brand continues to innovate and spread cheer. The Doods’ reach is expanding rapidly, attracting attention on major platforms like Epic Games, while ensuring that their core message of spreading joy and light-heartedness remains intact.

For those interested in joining the Doodi movement, it's simple to become part of the community. Fans can purchase $DOODi tokens through a few easy steps, starting with setting up a Phantom Wallet, purchasing SOL tokens, and then swapping for $DOODi via the Raydium exchange. Once you’ve made the swap, you’re officially a part of the Doodi Empire. The Doodiverse is an inclusive space, inviting fans to "DOODify" their world and share in the fun with a global network of like-minded enthusiasts.

A significant security breach occurred when a private key was leaked, compromising dozens of wallet addresses. The exposed private key allowed the attacker to access and steal $DOODi tokens from these wallets. The attacker then proceeded to liquidate the stolen tokens by gradually selling them, converting the funds into SOL, the native cryptocurrency of the Solana network. This attack exploited a vulnerability in the system, highlighting the need for tighter security measures around key management and storage.

Once the tokens were exchanged for SOL, the attacker realized a substantial profit. In total, they managed to convert the stolen assets into approximately 917 SOL, which, at the time, equaled roughly $171,000 USD. The funds were moved through a series of transactions, likely to obscure the hacker's trail, but the overall loss was significant. This breach underscores the risks inherent in decentralized finance, where the security of private keys is critical to protecting user assets.

SlowMist reports a total profit of about 917 SOL (approximately $171,000 USD).

The DoodiPal team reported the incident on Twitter and started tracing the funds to FixedFloat.

In response to the attack, the DoodiPals team and the broader community are focusing on strengthening security protocols to prevent similar incidents in the future. The leak of the private key has prompted a reevaluation of the system's infrastructure, particularly around private key storage and access control. The team is also working on methods to track and potentially recover stolen funds while bolstering the safety of wallet infrastructure to ensure that such vulnerabilities are addressed moving forward.

The team plans to recover by wisely managing their remaining treasury to ensure the successful rollout of their Web2 products. They aim to unify the Apeiron and Doodi communities through a rebranding effort and the issuance of a new token to revitalize both ecosystems. Additionally, they will share their recovery plans soon and host AMAs to address community questions and concerns. Despite the setback, their focus remains on rebuilding stronger and continuing their commitment to the community.

The prospects for recovery of the funds and the project relaunch remain uncertain.

DoodiPals is a brand centered around fun, energetic characters called "Doods" that spread joy, silliness, and positivity. A significant breach occurred when a private key was leaked, compromising several wallet addresses associated with DoodiPals. The attacker exploited this vulnerability to steal $DOODi tokens and gradually liquidated them by converting the stolen assets into SOL, the native currency of the Solana network. The total profit from the attack amounted to approximately 917 SOL (around $171,000 USD). The funds were moved through various transactions, making it difficult to trace. This incident highlighted critical weaknesses in key management and has led the team to focus on strengthening security measures to prevent future attacks and protect user assets.

evilcos - "The private key was leaked, and $DOODi from dozens of wallet addresses was stolen, gradually swapped into SOL, with the hacker profiting approximately 917 SOL." - Twitter/X (Oct 27)
DoodiPals - "A hacker is draining our treasury, we will assess the situation and get a sitrep on this soon." - Twitter/X (Oct 27)
DoodiPals - "Thank you everyone for your support and patience, going through the first hack and at such severity has been a tough wake up call. But it does not deter our determination to keep building to ensure the success of Apeiron and Doodi brand. With need to be sure to spend our remaining treasury wisely to ensure our web2 products can roll out as planned. We will likely unify the Apeiron and Doodi holders and community, as we rebrand and reissue a new token to revitalize the communities and thrive." - Twitter/X (Oct 27)
DoodiPals - "Here is a summary of the hacker's wallets/txs. We are currently working with FixedFloat to asses." - Twitter/X (Oct 27)
One Of The Attack Transaction - SolScan (Oct 27)
Reported Attacker EVM Address - RoninChain (Oct 27)
Transaction Swapping Assets Through FixedFloat - SolScan (Oct 27)
DoodiPals - "Update on the hack. The police report has been officially filed, and testimony provided. Further updates will follow soon." - Twitter/X (Oct 27)
DoodiPals Twitter/X Account (Oct 27)
DoodiPals Homepage (Oct 27)

More case studies

Sharwa Finance Margin Trading
Sandwich Attack Solvency Flaw

Noble Twitter/X Account
Compromise Fake Token Launches