Axie Infinity Ronin Bridge Unauthorized Treasury Access - Revision history

Azoundria at 23:57, 14 May 2024

2024-05-14T23:57:18Z

← Older revision		Revision as of 17:57, 14 May 2024
Line 1:		Line 1:
	{{Case Study Under Construction}}[[File:Axieinfinity.jpg\|thumb\|Axie Infinity]]Axie Infinity is a play-to-earn game with $4b in NFT sales. Rather than set up a proper multi-signature wallet, the keys were split between a small number of validators, and additional access was available for someone who no longer needed it. A hacker managed to breach a single entity who held 5 of the 9 keys, and made off with $625m worth of Ethereum and USDC.		{{Case Study Under Construction}}[[File:Axieinfinity.jpg\|thumb\|Axie Infinity]]Axie Infinity is a play-to-earn game with $4b in NFT sales. Rather than set up a proper multi-signature wallet, the keys were split between a small number of validators, and additional access was available for someone who no longer needed it. A hacker managed to breach a single entity who held 5 of the 9 keys, and made off with $625m worth of Ethereum and USDC.
			<ref name="yahoofinance-7725" /><ref name="youtube-8054" /><ref name="carnegieendowment-9983" />

	== About Axie Infinity ==		== About Axie Infinity ==
Line 315:		Line 316:
	<ref name="nytimes-9826">[https://www.nytimes.com/2022/09/28/technology/crypto-hacks-defi.html The Crypto World Is on Edge After a String of Hacks - The New York Times] (Nov 30, 2022)</ref>		<ref name="nytimes-9826">[https://www.nytimes.com/2022/09/28/technology/crypto-hacks-defi.html The Crypto World Is on Edge After a String of Hacks - The New York Times] (Nov 30, 2022)</ref>
	<ref name="nytimes-9827">[https://www.nytimes.com/2022/06/30/business/north-korea-crypto-hack.html How North Korea Used Crypto to Hack Its Way Through the Pandemic - The New York Times] (Nov 30, 2022)</ref>		<ref name="nytimes-9827">[https://www.nytimes.com/2022/06/30/business/north-korea-crypto-hack.html How North Korea Used Crypto to Hack Its Way Through the Pandemic - The New York Times] (Nov 30, 2022)</ref>
			<ref name="carnegieendowment-9983">[https://carnegieendowment.org/specialprojects/protectingfinancialstability/timeline Timeline of Cyber Incidents Involving Financial Institutions - Carnegie Endowment for International Peace] (Dec 12, 2022)</ref>
	</references>		</references>

Azoundria: Another 30 minutes complete. Additional external sources merged in. Covering more details on Lazarus laundering of funds.

2023-11-16T20:23:49Z

Another 30 minutes complete. Additional external sources merged in. Covering more details on Lazarus laundering of funds.

Show changes

Azoundria: Another 30 minutes complete. Prevention added and much more research.

2023-07-07T17:08:34Z

Another 30 minutes complete. Prevention added and much more research.

← Older revision		Revision as of 11:08, 7 July 2023
Line 1:		Line 1:
	{{Case Study Under Construction}}~~{{Unattributed Sources}}~~		{{Case Study Under Construction}}[[File:Axieinfinity.jpg\|thumb\|Axie Infinity]]Axie Infinity is a play-to-earn game with $4b in NFT sales. Rather than set up a proper multi-signature wallet, the keys were split between a small number of validators, and additional access was available for someone who no longer needed it. A hacker managed to breach a single entity who held 5 of the 9 keys, and made off with $625m worth of Ethereum and USDC.

	[[File:Axieinfinity.jpg\|thumb\|Axie Infinity]]Axie Infinity is a play-to-earn game with $4b in NFT sales. Rather than set up a proper multi-signature wallet, the keys were split between a small number of validators, and additional access was available for someone who no longer needed it. A hacker managed to breach a single entity who held 5 of the 9 keys, and made off with $625m worth of Ethereum and USDC.

	~~This is a global/international case not involving a specific country.<ref name="axiesubstack-7737" /><ref name="etherscan-7738" /><ref name="etherscan-7739" /><ref name="etherscan-7740" />~~

	== About Axie Infinity ==		== About Axie Infinity ==
Line 138:		Line 134:
	== Technical Details ==		== Technical Details ==
	TBD		TBD


			<ref name="etherscan-7738" /><ref name="etherscan-7739" /><ref name="etherscan-7740" />



Line 233:		Line 233:
	"The 56,000 ETH compromised from the Axie DAO treasury will remain undercollateralized as Sky Mavis works with law enforcement to recover the funds. If the funds are not fully recovered within two years, the Axie DAO will vote on next steps for the treasury. We believe that Axie will go down in history as the first game to imbue players with true digital property rights and recent events have only strengthened this conviction."		"The 56,000 ETH compromised from the Axie DAO treasury will remain undercollateralized as Sky Mavis works with law enforcement to recover the funds. If the funds are not fully recovered within two years, the Axie DAO will vote on next steps for the treasury. We believe that Axie will go down in history as the first game to imbue players with true digital property rights and recent events have only strengthened this conviction."
	== Individual Prevention Policies ==		== Individual Prevention Policies ==
			When it comes to users protecting themselves on the blockchain, special care is needed any time funds are not held in your own wallet. Users must avoid or exercise an extreme level of diligence when depending on any third party.

	{{Prevention:Individual:Avoid Third Party Custodians}}		{{Prevention:Individual:Avoid Third Party Custodians}}

Line 240:		Line 242:

	== Platform Prevention Policies ==		== Platform Prevention Policies ==
	A proper multi-signature storage has all keys offline and held by separate individuals. ~~The primary issue is that~~ the multi-signature wallet was not actually distributed so that keys were held by multiple ~~entities~~. Instead, ~~enough~~ keys to do the withdrawal were held by a single entity, ~~which was breached~~.		A proper multi-signature storage has all keys offline and held by separate human individuals, which means that multiple human beings must be simultaneously breached to obtain access to the funds. While Axie Infinity did set up a multi-signature wallet, this failed because the multi-signature wallet was not actually distributed so that keys were held by multiple human beings. Instead, four of the five keys required to do the withdrawal were held by a single (inactive) organization, and one of the keys was held by an automated software system. When multiple keys are held by the same entity or secured in the same manner, it circumvents the benefits of the multi-signature wallet. Keys need to be stored offline and managed by humans with critical thinking to effectively detect suspicious transactions.

	{{Prevention:Platforms:Implement Multi-Signature}}		{{Prevention:Platforms:Implement Multi-Signature}}

	{{Prevention:Platforms:Regular Audit Procedures}}		{{Prevention:Platforms:Regular Audit Procedures}}

			In the event of a failure, it is important to have funds ready to make users whole. While Axie Infinity was able to raise a large amount of capital from investors, they could have already had a portion of funds aside in an offline multi-signature treasury. Another option which reduces the capital requirements would be to pool together insurance funds into an industry insurance fund, that can have more funds available for multiple platforms.

	{{Prevention:Platforms:Establish Industry Insurance Fund}}		{{Prevention:Platforms:Establish Industry Insurance Fund}}
Line 251:		Line 255:

	== Regulatory Prevention Policies ==		== Regulatory Prevention Policies ==
			A proper third party assessment of the wallet would have most likely uncovered the vulnerabilities including having 4 of 9 keys held by a single entity, that the single entity was inactive and not securing their keys properly, and that another key was held by an automated system with a vulnerability instead of a human being. Detecting and correcting any one of these would have prevented the breach of funds entirely.

	{{Prevention:Regulators:Platform Security Assessments}}		{{Prevention:Regulators:Platform Security Assessments}}

			While securing and preventing the issue is ideal, it is also a good idea to have an industry insurance fund available to assist victims. This would reduce the requirements on platforms to maintain their own treasuries for this purpose, the reliance on funds having to be raised from investors, or the risk that users may be left severely damaged through an attack or exploit.

	{{Prevention:Regulators:Establish Industry Insurance Fund}}		{{Prevention:Regulators:Establish Industry Insurance Fund}}
Line 267:		Line 275:
	<ref name="etherscan-7738">[https://etherscan.io/tx/0xc28fad5e8d5e0ce6a2eaf67b6687be5d58113e16be590824d6cfa1a94467d0b7 Transfer of 173,600 ETH From Axie Infinity Ronin Bridge - Etherscan] (May 21, 2022)</ref>		<ref name="etherscan-7738">[https://etherscan.io/tx/0xc28fad5e8d5e0ce6a2eaf67b6687be5d58113e16be590824d6cfa1a94467d0b7 Transfer of 173,600 ETH From Axie Infinity Ronin Bridge - Etherscan] (May 21, 2022)</ref>
	<ref name="etherscan-7739">[https://etherscan.io/tx/0xed2c72ef1a552ddaec6dd1f5cddf0b59a8f37f82bdda5257d9c7c37db7bb9b08 Transfer of 25,500,000 USDC - Etherscan] (May 21, 2022)</ref>		<ref name="etherscan-7739">[https://etherscan.io/tx/0xed2c72ef1a552ddaec6dd1f5cddf0b59a8f37f82bdda5257d9c7c37db7bb9b08 Transfer of 25,500,000 USDC - Etherscan] (May 21, 2022)</ref>
	<ref name="etherscan-7740">https://etherscan.io/address/0x098b716b8aaf21512996dc57eb0615e2383e2f96 (May 21, 2022)</ref>		<ref name="etherscan-7740">[https://etherscan.io/address/0x098b716b8aaf21512996dc57eb0615e2383e2f96 Ronin Bridge Exploiter - Etherscan] (May 21, 2022)</ref>
	<ref name="businessinsidermarkets-7741">[https://markets.businessinsider.com/news/currencies/axie-infinity-crypto-heist-reimburse-ronin-tokens-skymavis-hacker-attack-2022-3 Victims of $600 Million Crypto Heist Will Be Reimbursed: Report - Market Insider] (May 21, 2022)</ref>		<ref name="businessinsidermarkets-7741">[https://markets.businessinsider.com/news/currencies/axie-infinity-crypto-heist-reimburse-ronin-tokens-skymavis-hacker-attack-2022-3 Victims of $600 Million Crypto Heist Will Be Reimbursed: Report - Market Insider] (May 21, 2022)</ref>
	<ref name="businessinsidermarkets-7742">[https://markets.businessinsider.com/news/currencies/binance-hack-axie-infinity-game-north-korea-blockchain-crypto-fbi-2022-4 Binance Seizes $5.8 Million From $620 Million Axie Infinity Hack - Business Insider] (May 21, 2022)</ref>		<ref name="businessinsidermarkets-7742">[https://markets.businessinsider.com/news/currencies/binance-hack-axie-infinity-game-north-korea-blockchain-crypto-fbi-2022-4 Binance Seizes $5.8 Million From $620 Million Axie Infinity Hack - Business Insider] (May 21, 2022)</ref>

Azoundria: Another 30 minutes complete.

2023-07-05T20:15:46Z

Another 30 minutes complete.

Show changes

Azoundria: Another 30 minutes complete. Prevention added and much more research.

2023-07-04T22:01:35Z

Another 30 minutes complete. Prevention added and much more research.

Show changes

Azoundria: Another 30 minutes complete.

2023-06-28T16:10:19Z

Another 30 minutes complete.

Show changes

Azoundria: Done 30 minutes, working on fundraising article.

2023-04-28T18:33:19Z

Done 30 minutes, working on fundraising article.

← Older revision		Revision as of 12:33, 28 April 2023
Line 4:		Line 4:
	[[File:Axieinfinity.jpg\|thumb\|Axie Infinity]]Axie Infinity is a play-to-earn game with $4b in NFT sales. Rather than set up a proper multi-signature wallet, the keys were split between a small number of validators, and additional access was available for someone who no longer needed it. A hacker managed to gain access to 5 of the 9 keys and made off with $625m worth of Ethereum and USDC.		[[File:Axieinfinity.jpg\|thumb\|Axie Infinity]]Axie Infinity is a play-to-earn game with $4b in NFT sales. Rather than set up a proper multi-signature wallet, the keys were split between a small number of validators, and additional access was available for someone who no longer needed it. A hacker managed to gain access to 5 of the 9 keys and made off with $625m worth of Ethereum and USDC.

	This is a global/international case not involving a specific country.~~<ref name="roninblockchainsubstack-7735" /><ref name="treasurydepartment-7736" />~~<ref name="axiesubstack-7737" /><ref name="etherscan-7738" /><ref name="etherscan-7739" /><ref name="etherscan-7740" /><ref name="businessinsidermarkets-7741" /><ref name="businessinsidermarkets-7742" /><ref name="czbinancetwitter-7743" /><ref name="philrosenntwitter-7744" /><ref name="wikipedia-7745" /><ref name="axieinfinity-7746" /><ref name="axieinfinitywhitepaper-7747" /><ref name="yahoofinance-7725" /><ref name="youtube-8054" /><ref name="youtube-8160" /><ref name="gadgets360-8151" /><ref name="nytimes-9826" /><ref name="nytimes-9827" />		This is a global/international case not involving a specific country.<ref name="axiesubstack-7737" /><ref name="etherscan-7738" /><ref name="etherscan-7739" /><ref name="etherscan-7740" /><ref name="businessinsidermarkets-7741" /><ref name="businessinsidermarkets-7742" /><ref name="czbinancetwitter-7743" /><ref name="philrosenntwitter-7744" /><ref name="wikipedia-7745" /><ref name="axieinfinity-7746" /><ref name="axieinfinitywhitepaper-7747" /><ref name="yahoofinance-7725" /><ref name="youtube-8054" /><ref name="youtube-8160" /><ref name="gadgets360-8151" /><ref name="nytimes-9826" /><ref name="nytimes-9827" />

	== About Axie Infinity ==		== About Axie Infinity ==
Line 99:		Line 99:
	\|March 29th, 2022 10:29:00 AM MDT		\|March 29th, 2022 10:29:00 AM MDT
	\|Community Alert Posted		\|Community Alert Posted
	\|The Ronin Chain publishes a community alert. They reportedly became aware of the exploit that same day after a user reported that they were unable to withdraw 5,000 ethereum from the vault<ref name="roninblockchainsubstack-7735" />. TBD ~~more details needed~~.		\|The Ronin Chain publishes a community alert<ref>[https://web.archive.org/web/20220329153101/https://roninblockchain.substack.com/p/community-alert-ronin-validators?s=w Community Alert: Ronin Validators Compromised - Archive March 29th, 2022 9:31:01 AM MDT] (Apr 28, 2023)</ref>. They report that Ronin Network has been hit by a security breach that compromised Ronin validators, leading to a theft of 173,600 Ethereum and $25.5m in USDC. The attacker used hacked private keys to forge fake withdrawals, taking advantage of a backdoor in the network's gas-free RPC node to obtain the signature from the Axie DAO validator. After discovering the attack, Ronin halted the Ronin bridge and Katana DEX and is working to recover or reimburse all funds, as well as collaborate with law enforcement officials and forensic cryptographers. Deposits of AXS, RON, and SLP on Ronin are still safe. The company is also increasing the validator threshold from five to eight to prevent future attacks. They reportedly became aware of the exploit that same day after a user reported that they were unable to withdraw 5,000 ethereum from the vault<ref name="roninblockchainsubstack-7735" />. TBD revisit and follow any links in this post which weren't viewed yet.
	\|-		\|-
	\|March 29th, 2022 12:41:00 PM MDT		\|March 29th, 2022 12:41:00 PM MDT
Line 107:		Line 107:
	\|March 30th, 2022 1:28:00 PM MDT		\|March 30th, 2022 1:28:00 PM MDT
	\|Community Alert Updated		\|Community Alert Updated
	\|~~TBD fill in~~ with ~~details~~<ref name="roninblockchainsubstack-7735" />.		\|Axie Infinity updates their community to indicate they are continuing their investigations. They mention they are working with both Chainalysis to monitor the stolen funds and Crowdstrike to handle forensics and the setup of surveillance tools. They are certain that the attack was an external breach, and "[a]ll evidence points to this attack being socially engineered, rather than a technical flaw". They are "committed to ensuring that all of the drained funds are recovered or reimbursed" though they don't mention any plan and are presently just "continuing conversations". They will "continue to provide updates"<ref name="roninblockchainsubstack-7735" />.
	\|-		\|-
	\|March 31st, 2022 2:03:00 PM MDT		\|March 31st, 2022 2:03:00 PM MDT
	\|Community Alert Updated		\|Community Alert Updated
	\|~~TBD fill~~ in ~~with details~~<ref name="roninblockchainsubstack-7735" />.		\|Axie Infinity updates to indicate that they are continuing their investigation and don't have any more substantial information to share. They have had "various calls" with key stakeholders, law enforcement agencies, and major exchanges. All of the former Sky Mavis validators have been replaced. They are pushing forward a plan to add new validators to the Ronin Network in the coming weeks<ref name="roninblockchainsubstack-7735" />.
	\|-		\|-
	\|April 2nd, 2022 3:00:00 AM MDT		\|April 2nd, 2022 3:00:00 AM MDT
	\|Community Alert Updated		\|Community Alert Updated
	\|~~TBD fill in with details~~<ref name="roninblockchainsubstack-7735" /><ref>[https://web.archive.org/web/20230420133735/https://blog.roninchain.com/p/community-alert-ronin-validators Community Alert: Ronin Validators Compromised - Ronin Chain Blog Archive April 20th, 2023 7:37:35 AM MDT] (Apr 23, 2023)</ref>~~. TBD spread source around~~.		\|Axie Infinity announces that Binance has resumed withdrawals for both Axie Infinity Shards (AXS) and Smooth Love Potion (SLP) from their exchange. Wrapped Ether transactions remain closed. The Ronin Bridge will be reopened, but a timeline is not known at this time<ref name="roninblockchainsubstack-7735" /><ref>[https://web.archive.org/web/20230420133735/https://blog.roninchain.com/p/community-alert-ronin-validators Community Alert: Ronin Validators Compromised - Ronin Chain Blog Archive April 20th, 2023 7:37:35 AM MDT] (Apr 23, 2023)</ref>.
	\|-		\|-
	\|April 2nd, 2022 8:03:00 AM MDT		\|April 2nd, 2022 8:03:00 AM MDT
Line 124:		Line 124:
	\|Phil Rosen Twitter Timeline Published		\|Phil Rosen Twitter Timeline Published
	\|A series of analysis Tweets are published by blockchain researcher Phil Rosen. Twitter later publishes a special feature event timeline<ref name="twitterevents-7732" />.		\|A series of analysis Tweets are published by blockchain researcher Phil Rosen. Twitter later publishes a special feature event timeline<ref name="twitterevents-7732" />.
			\|-
			\|April 6th, 2022 4:01:43 AM MDT
			\|Funds Raised For Recovery
			\|Sky Mavis, the company behind Axie Infinity, announces they have raised $150 million in a funding round led by Binance. Other participants in the round included Animoca Brands, a16z, Dialectic, Paradigm, and Accel. The funds will be used to reimburse users who were affected by the Ronin Validator Hack, in which 173,600 Ethereum and 25.5 million USDC were drained from the Ronin bridge. The Ronin Network bridge will open again once it has undergone a security upgrade and several audits, which may take several weeks. Sky Mavis will increase its validator group to 21 validators within the next three months, which will be a mix of partners, community members, and long-term allies<ref name="axiesubstack-7737" /><ref>[https://web.archive.org/web/20220406100843/https://axie.substack.com/p/funding?s=r Sky Mavis Raises $150M Led By Binance, Funds to be Restored on the Ronin Bridge - The Lunacian Archive April 6th, 2022 4:08:43 AM MDT] (Apr 28, 2023)</ref>. TBD analyze change from "people" to "unique addresses" in post.
	\|-		\|-
	\|April 6th, 2022 5:12:00 AM MDT		\|April 6th, 2022 5:12:00 AM MDT
	\|Community Alert Updated		\|Community Alert Updated
	\|~~A $150m USD~~ funding round is ~~led by Binance~~, ~~with participation from Animoca Brands~~, ~~a16z~~, ~~Dialectic~~, and ~~Paradigm~~. The ~~round combined with Sky Mavis~~ and ~~Axie balance sheet funds~~, ~~will reportedly be used to ensure~~ that ~~all users affected~~ by ~~the Ronin Validator Hack will be reimbursed~~. ~~The bridge will relaunch after security upgrades are completed~~<ref name="~~roninblockchainsubstack~~-~~7735~~" />.		\|Information about the funding round is also posted on the official community alert<ref name="roninblockchainsubstack-7735" />.
			\|-
			\|April 14th, 2022 9:19:20 AM MDT
			\|OFAC Publishes Sanction Notice
			\|The United States Office of Foreign Assets Control publishes an official sanction of the Ethereum blockchain address 0x098B716B8Aaf21512996dC57EB0615e2383E2f96, informing that the address has been added to the OFAC SDN list. They include various aliases for the Lazarus Group including "Appleworm," "APT-C-26," and "Hidden Cobra," among others. The group is located in the Potonggang District of Pyongyang, North Korea. The statement notes that there is a secondary sanctions risk under the North Korea Sanctions Regulations, sections 510.201 and 510.210, and that transactions with the group are prohibited for persons owned or controlled by U.S. financial institutions under section 510.214 [DPRK3]<ref name="treasurydepartment-7736" /><ref name=":0">[https://web.archive.org/web/20220414151920/https://home.treasury.gov/policy-issues/financial-sanctions/recent-actions/20220414 North Korea Designation Update - US Department of the Treasury Archive April 14th, 2022 9:19:20 AM MDT] (Apr 28, 2023)</ref>.
	\|-		\|-
	\|April 14th, 2022 12:00:00 PM MDT		\|April 14th, 2022 12:00:00 PM MDT
Line 160:		Line 168:
	== Ultimate Outcome ==		== Ultimate Outcome ==
	What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?		What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

			=== OFAC Sanction Notice ===
			On April 14th, 2022, The US Department of the Treasury updated their SDN to include the wallet address with the stolen Ethereum from this attack. They issued a statement informing that changes have been made to OFAC's SDN List (a list of people and entities that are sanctioned by the US government). Specifically, the entry for the Lazarus Group has been updated to include a digital currency address, ETH 0x098B716B8Aaf21512996dC57EB0615e2383E2f96. The Lazarus Group is also known by various aliases, including "Appleworm," "APT-C-26," and "Hidden Cobra," among others. The group is located in the Potonggang District of Pyongyang, North Korea. The statement notes that there is a secondary sanctions risk under the North Korea Sanctions Regulations, sections 510.201 and 510.210, and that transactions with the group are prohibited for persons owned or controlled by U.S. financial institutions under section 510.214 [DPRK3]<ref name="treasurydepartment-7736" /><ref name=":0" />.

	== Total Amount Recovered ==		== Total Amount Recovered ==
Line 192:		Line 203:
	<ref name="roninblockchainsubstack-7735">[https://roninblockchain.substack.com/p/community-alert-ronin-validators Community Alert: Ronin Validators Compromised - Ronin Chain Blog] (May 21, 2022)</ref>		<ref name="roninblockchainsubstack-7735">[https://roninblockchain.substack.com/p/community-alert-ronin-validators Community Alert: Ronin Validators Compromised - Ronin Chain Blog] (May 21, 2022)</ref>
	<ref name="treasurydepartment-7736">[https://home.treasury.gov/policy-issues/financial-sanctions/recent-actions/20220414 North Korea Designation Update \| U.S. Department of the Treasury] (May 21, 2022)</ref>		<ref name="treasurydepartment-7736">[https://home.treasury.gov/policy-issues/financial-sanctions/recent-actions/20220414 North Korea Designation Update \| U.S. Department of the Treasury] (May 21, 2022)</ref>
	<ref name="axiesubstack-7737">https://axie.substack.com/p/funding (May 21, 2022)</ref>		<ref name="axiesubstack-7737">[https://axie.substack.com/p/funding Sky Mavis Raises $150M Led By Binance, Funds to be Restored on the Ronin Bridge - The Lunacian] (May 21, 2022)</ref>
	<ref name="etherscan-7738">https://etherscan.io/tx/0xc28fad5e8d5e0ce6a2eaf67b6687be5d58113e16be590824d6cfa1a94467d0b7 (May 21, 2022)</ref>		<ref name="etherscan-7738">https://etherscan.io/tx/0xc28fad5e8d5e0ce6a2eaf67b6687be5d58113e16be590824d6cfa1a94467d0b7 (May 21, 2022)</ref>
	<ref name="etherscan-7739">https://etherscan.io/tx/0xed2c72ef1a552ddaec6dd1f5cddf0b59a8f37f82bdda5257d9c7c37db7bb9b08 (May 21, 2022)</ref>		<ref name="etherscan-7739">https://etherscan.io/tx/0xed2c72ef1a552ddaec6dd1f5cddf0b59a8f37f82bdda5257d9c7c37db7bb9b08 (May 21, 2022)</ref>

Azoundria: Updated, completed initial 30 minutes on this case so far.

2023-04-23T20:05:50Z

Updated, completed initial 30 minutes on this case so far.

@@ Line 4: / Line 4: @@
 [[File:Axieinfinity.jpg|thumb|Axie Infinity]]Axie Infinity is a play-to-earn game with $4b in NFT sales. Rather than set up a proper multi-signature wallet, the keys were split between a small number of validators, and additional access was available for someone who no longer needed it. A hacker managed to gain access to 5 of the 9 keys and made off with $625m worth of Ethereum and USDC.
-This is a global/international case not involving a specific country.<ref name="businessinsidermarkets-7734" /><ref name="roninblockchainsubstack-7735" /><ref name="treasurydepartment-7736" /><ref name="axiesubstack-7737" /><ref name="etherscan-7738" /><ref name="etherscan-7739" /><ref name="etherscan-7740" /><ref name="businessinsidermarkets-7741" /><ref name="businessinsidermarkets-7742" /><ref name="czbinancetwitter-7743" /><ref name="philrosenntwitter-7744" /><ref name="wikipedia-7745" /><ref name="axieinfinity-7746" /><ref name="axieinfinitywhitepaper-7747" /><ref name="yahoofinance-7725" /><ref name="youtube-8054" /><ref name="youtube-8160" /><ref name="gadgets360-8151" /><ref name="nytimes-9826" /><ref name="nytimes-9827" />
+This is a global/international case not involving a specific country.<ref name="roninblockchainsubstack-7735" /><ref name="treasurydepartment-7736" /><ref name="axiesubstack-7737" /><ref name="etherscan-7738" /><ref name="etherscan-7739" /><ref name="etherscan-7740" /><ref name="businessinsidermarkets-7741" /><ref name="businessinsidermarkets-7742" /><ref name="czbinancetwitter-7743" /><ref name="philrosenntwitter-7744" /><ref name="wikipedia-7745" /><ref name="axieinfinity-7746" /><ref name="axieinfinitywhitepaper-7747" /><ref name="yahoofinance-7725" /><ref name="youtube-8054" /><ref name="youtube-8160" /><ref name="gadgets360-8151" /><ref name="nytimes-9826" /><ref name="nytimes-9827" />
 == About Axie Infinity ==
@@ Line 96: / Line 96: @@
 |Main Event
 |Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
 |-
 |April 2nd, 2022 8:03:00 AM MDT
@@ Line 104: / Line 124: @@
 |Phil Rosen Twitter Timeline Published
 |A series of analysis Tweets are published by blockchain researcher Phil Rosen. Twitter later publishes a special feature event timeline<ref name="twitterevents-7732" />.
 |}
@@ Line 145: / Line 189: @@
 <ref name="twitterevents-7732">[https://twitter.com/i/events/1510264041289179140 A hacker just stole over $600 million in crypto. Experts explain the historic swindle — and why cyberattacks shouldn't discourage adoption of digital assets. - Twitter Events] (Apr 4, 2022)</ref>
 <ref name="businessinsidermarkets-7733">[https://markets.businessinsider.com/news/currencies/axie-infinity-hack-ronin-network-crypto-adoption-eth-blockchain-2022-4 Axie Infinity Hack Shouldn't Discourage Crypto Adoption, Experts Say - Market Insider] (May 21, 2022)</ref>
-<ref name="businessinsidermarkets-7734">[https://markets.businessinsider.com/news/currencies/crypto-hack-ronin-network-heist-cybercrime-cryptocurrency-axie-infinity-polynetwork-2022-3 One of the Largest Crypto Hacks Ever Hits Ronin Network] (May 21, 2022)</ref>
+<ref name="businessinsidermarkets-7734">[https://markets.businessinsider.com/news/currencies/crypto-hack-ronin-network-heist-cybercrime-cryptocurrency-axie-infinity-polynetwork-2022-3 One of the Largest Crypto Hacks Ever Hits Ronin Network - Market Insider] (May 21, 2022)</ref>
-<ref name="roninblockchainsubstack-7735">https://roninblockchain.substack.com/p/community-alert-ronin-validators (May 21, 2022)</ref>
+<ref name="roninblockchainsubstack-7735">[https://roninblockchain.substack.com/p/community-alert-ronin-validators Community Alert: Ronin Validators Compromised - Ronin Chain Blog] (May 21, 2022)</ref>
 <ref name="treasurydepartment-7736">[https://home.treasury.gov/policy-issues/financial-sanctions/recent-actions/20220414 North Korea Designation Update | U.S. Department of the Treasury] (May 21, 2022)</ref>
 <ref name="axiesubstack-7737">https://axie.substack.com/p/funding (May 21, 2022)</ref>

Azoundria: Starting up editing article.

2023-04-23T07:15:09Z

Starting up editing article.

← Older revision		Revision as of 01:15, 23 April 2023
Line 4:		Line 4:
	[[File:Axieinfinity.jpg\|thumb\|Axie Infinity]]Axie Infinity is a play-to-earn game with $4b in NFT sales. Rather than set up a proper multi-signature wallet, the keys were split between a small number of validators, and additional access was available for someone who no longer needed it. A hacker managed to gain access to 5 of the 9 keys and made off with $625m worth of Ethereum and USDC.		[[File:Axieinfinity.jpg\|thumb\|Axie Infinity]]Axie Infinity is a play-to-earn game with $4b in NFT sales. Rather than set up a proper multi-signature wallet, the keys were split between a small number of validators, and additional access was available for someone who no longer needed it. A hacker managed to gain access to 5 of the 9 keys and made off with $625m worth of Ethereum and USDC.

	This is a global/international case not involving a specific country.~~<ref name="twitterevents-7732" /><ref name="businessinsidermarkets-7733" />~~<ref name="businessinsidermarkets-7734" /><ref name="roninblockchainsubstack-7735" /><ref name="treasurydepartment-7736" /><ref name="axiesubstack-7737" /><ref name="etherscan-7738" /><ref name="etherscan-7739" /><ref name="etherscan-7740" /><ref name="businessinsidermarkets-7741" /><ref name="businessinsidermarkets-7742" /><ref name="czbinancetwitter-7743" /><ref name="philrosenntwitter-7744" /><ref name="wikipedia-7745" /><ref name="axieinfinity-7746" /><ref name="axieinfinitywhitepaper-7747" /><ref name="yahoofinance-7725" /><ref name="youtube-8054" /><ref name="youtube-8160" /><ref name="gadgets360-8151" /><ref name="nytimes-9826" /><ref name="nytimes-9827" />		This is a global/international case not involving a specific country.<ref name="businessinsidermarkets-7734" /><ref name="roninblockchainsubstack-7735" /><ref name="treasurydepartment-7736" /><ref name="axiesubstack-7737" /><ref name="etherscan-7738" /><ref name="etherscan-7739" /><ref name="etherscan-7740" /><ref name="businessinsidermarkets-7741" /><ref name="businessinsidermarkets-7742" /><ref name="czbinancetwitter-7743" /><ref name="philrosenntwitter-7744" /><ref name="wikipedia-7745" /><ref name="axieinfinity-7746" /><ref name="axieinfinitywhitepaper-7747" /><ref name="yahoofinance-7725" /><ref name="youtube-8054" /><ref name="youtube-8160" /><ref name="gadgets360-8151" /><ref name="nytimes-9826" /><ref name="nytimes-9827" />

	== About Axie Infinity ==		== About Axie Infinity ==
Line 97:		Line 97:
	\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
	\|-		\|-
	\|		\|April 2nd, 2022 8:03:00 AM MDT
	\|		\|Market Insider Article Published
	\|		\|Market Insider publishes an article about the exploit, and that it shouldn't stop adoption<ref name="businessinsidermarkets-7733" />. TBD expand with more details.
			\|-
			\|April 2nd, 2022 8:21:00 AM MDT
			\|Phil Rosen Twitter Timeline Published
			\|A series of analysis Tweets are published by blockchain researcher Phil Rosen. Twitter later publishes a special feature event timeline<ref name="twitterevents-7732" />.
	\|}		\|}

Line 138:		Line 142:

	== References ==		== References ==
	<references><ref name="twitterevents-7732">[https://twitter.com/i/events/1510264041289179140 A hacker just stole over $600 million in crypto. Experts explain the historic swindle — and why cyberattacks shouldn't discourage adoption of digital assets.] (Apr 4, 2022)</ref>		<references>
			<ref name="twitterevents-7732">[https://twitter.com/i/events/1510264041289179140 A hacker just stole over $600 million in crypto. Experts explain the historic swindle — and why cyberattacks shouldn't discourage adoption of digital assets. - Twitter Events] (Apr 4, 2022)</ref>
	<ref name="businessinsidermarkets-7733">[https://markets.businessinsider.com/news/currencies/axie-infinity-hack-ronin-network-crypto-adoption-eth-blockchain-2022-4 Axie Infinity Hack Shouldn't Discourage Crypto Adoption, Experts Say] (May 21, 2022)</ref>		<ref name="businessinsidermarkets-7733">[https://markets.businessinsider.com/news/currencies/axie-infinity-hack-ronin-network-crypto-adoption-eth-blockchain-2022-4 Axie Infinity Hack Shouldn't Discourage Crypto Adoption, Experts Say - Market Insider] (May 21, 2022)</ref>

	<ref name="businessinsidermarkets-7734">[https://markets.businessinsider.com/news/currencies/crypto-hack-ronin-network-heist-cybercrime-cryptocurrency-axie-infinity-polynetwork-2022-3 One of the Largest Crypto Hacks Ever Hits Ronin Network] (May 21, 2022)</ref>		<ref name="businessinsidermarkets-7734">[https://markets.businessinsider.com/news/currencies/crypto-hack-ronin-network-heist-cybercrime-cryptocurrency-axie-infinity-polynetwork-2022-3 One of the Largest Crypto Hacks Ever Hits Ronin Network] (May 21, 2022)</ref>
			<ref name="roninblockchainsubstack-7735">https://roninblockchain.substack.com/p/community-alert-ronin-validators (May 21, 2022)</ref>
	<ref name="roninblockchainsubstack-7735">[https://roninblockchain.substack.com/p/community-alert-ronin-validators ~~https://roninblockchain.substack.com/p/community-alert-ronin-validators]~~ (May 21, 2022)</ref>

	<ref name="treasurydepartment-7736">[https://home.treasury.gov/policy-issues/financial-sanctions/recent-actions/20220414 North Korea Designation Update \| U.S. Department of the Treasury] (May 21, 2022)</ref>		<ref name="treasurydepartment-7736">[https://home.treasury.gov/policy-issues/financial-sanctions/recent-actions/20220414 North Korea Designation Update \| U.S. Department of the Treasury] (May 21, 2022)</ref>
			<ref name="axiesubstack-7737">https://axie.substack.com/p/funding (May 21, 2022)</ref>
	<ref name="axiesubstack-7737">~~[https://axie.substack.com/p/funding~~ https://axie.substack.com/p/funding] (May 21, 2022)</ref>		<ref name="etherscan-7738">https://etherscan.io/tx/0xc28fad5e8d5e0ce6a2eaf67b6687be5d58113e16be590824d6cfa1a94467d0b7 (May 21, 2022)</ref>
			<ref name="etherscan-7739">https://etherscan.io/tx/0xed2c72ef1a552ddaec6dd1f5cddf0b59a8f37f82bdda5257d9c7c37db7bb9b08 (May 21, 2022)</ref>
	<ref name="etherscan-7738">[https://etherscan.io/tx/0xc28fad5e8d5e0ce6a2eaf67b6687be5d58113e16be590824d6cfa1a94467d0b7 ~~https://etherscan.io/tx/0xc28fad5e8d5e0ce6a2eaf67b6687be5d58113e16be590824d6cfa1a94467d0b7]~~ (May 21, 2022)</ref>		<ref name="etherscan-7740">https://etherscan.io/address/0x098b716b8aaf21512996dc57eb0615e2383e2f96 (May 21, 2022)</ref>

	<ref name="etherscan-7739">[https://etherscan.io/tx/0xed2c72ef1a552ddaec6dd1f5cddf0b59a8f37f82bdda5257d9c7c37db7bb9b08 ~~https://etherscan.io/tx/0xed2c72ef1a552ddaec6dd1f5cddf0b59a8f37f82bdda5257d9c7c37db7bb9b08]~~ (May 21, 2022)</ref>

	<ref name="etherscan-7740">[https://etherscan.io/address/0x098b716b8aaf21512996dc57eb0615e2383e2f96 ~~https://etherscan.io/address/0x098b716b8aaf21512996dc57eb0615e2383e2f96]~~ (May 21, 2022)</ref>

	<ref name="businessinsidermarkets-7741">[https://markets.businessinsider.com/news/currencies/axie-infinity-crypto-heist-reimburse-ronin-tokens-skymavis-hacker-attack-2022-3 Victims of $600 Million Crypto Heist Will Be Reimbursed: Report] (May 21, 2022)</ref>		<ref name="businessinsidermarkets-7741">[https://markets.businessinsider.com/news/currencies/axie-infinity-crypto-heist-reimburse-ronin-tokens-skymavis-hacker-attack-2022-3 Victims of $600 Million Crypto Heist Will Be Reimbursed: Report] (May 21, 2022)</ref>

	<ref name="businessinsidermarkets-7742">[https://markets.businessinsider.com/news/currencies/binance-hack-axie-infinity-game-north-korea-blockchain-crypto-fbi-2022-4 Binance Seizes $5.8 Million From $620 Million Axie Infinity Hack] (May 21, 2022)</ref>		<ref name="businessinsidermarkets-7742">[https://markets.businessinsider.com/news/currencies/binance-hack-axie-infinity-game-north-korea-blockchain-crypto-fbi-2022-4 Binance Seizes $5.8 Million From $620 Million Axie Infinity Hack] (May 21, 2022)</ref>

	<ref name="czbinancetwitter-7743">[https://twitter.com/cz_binance/status/1517385438469791749 @cz_binance Twitter] (May 21, 2022)</ref>		<ref name="czbinancetwitter-7743">[https://twitter.com/cz_binance/status/1517385438469791749 @cz_binance Twitter] (May 21, 2022)</ref>

	<ref name="philrosenntwitter-7744">[https://twitter.com/philrosenn/status/1510261235740254209 @philrosenn Twitter] (May 21, 2022)</ref>		<ref name="philrosenntwitter-7744">[https://twitter.com/philrosenn/status/1510261235740254209 @philrosenn Twitter] (May 21, 2022)</ref>

	<ref name="wikipedia-7745">[https://en.wikipedia.org/wiki/Axie_Infinity Axie Infinity - Wikipedia] (May 21, 2022)</ref>		<ref name="wikipedia-7745">[https://en.wikipedia.org/wiki/Axie_Infinity Axie Infinity - Wikipedia] (May 21, 2022)</ref>
			<ref name="axieinfinity-7746">https://axieinfinity.com/ (May 21, 2022)</ref>
	<ref name="axieinfinity-7746">[https://axieinfinity.com/ ~~https://axieinfinity.com/]~~ (May 21, 2022)</ref>

	<ref name="axieinfinitywhitepaper-7747">[https://whitepaper.axieinfinity.com/ Axie Infinity - Axie Infinity] (May 21, 2022)</ref>		<ref name="axieinfinitywhitepaper-7747">[https://whitepaper.axieinfinity.com/ Axie Infinity - Axie Infinity] (May 21, 2022)</ref>

	<ref name="yahoofinance-7725">[https://finance.yahoo.com/news/trezor-issues-data-breach-warning-160241180.html Trezor Issues Data Breach Warning As Users Cite Phishing Attacks] (May 21, 2022)</ref>		<ref name="yahoofinance-7725">[https://finance.yahoo.com/news/trezor-issues-data-breach-warning-160241180.html Trezor Issues Data Breach Warning As Users Cite Phishing Attacks] (May 21, 2022)</ref>

	<ref name="youtube-8054">[https://www.youtube.com/watch?v=8dzMOuEjFIY The LUNA and UST crash — WTF happened? Will they recover? \| The Market Report - YouTube] (Jun 18, 2022)</ref>		<ref name="youtube-8054">[https://www.youtube.com/watch?v=8dzMOuEjFIY The LUNA and UST crash — WTF happened? Will they recover? \| The Market Report - YouTube] (Jun 18, 2022)</ref>

	<ref name="youtube-8160">[https://youtu.be/8dzMOuEjFIY?t=2340 The LUNA and UST crash — WTF happened? Will they recover? \| The Market Report - YouTube] (Jun 20, 2022)</ref>		<ref name="youtube-8160">[https://youtu.be/8dzMOuEjFIY?t=2340 The LUNA and UST crash — WTF happened? Will they recover? \| The Market Report - YouTube] (Jun 20, 2022)</ref>

	<ref name="gadgets360-8151">[https://gadgets360.com/cryptocurrency/news/bored-apes-yacht-club-hack-instagram-discord-nfts-worth-million-stolen-2920958 Bored Ape Yacht Club Instagram, Discord Hacked, NFTs Worth $13.7 Million Stolen \| Technology News] (Jun 20, 2022)</ref>		<ref name="gadgets360-8151">[https://gadgets360.com/cryptocurrency/news/bored-apes-yacht-club-hack-instagram-discord-nfts-worth-million-stolen-2920958 Bored Ape Yacht Club Instagram, Discord Hacked, NFTs Worth $13.7 Million Stolen \| Technology News] (Jun 20, 2022)</ref>

	<ref name="nytimes-9826">[https://www.nytimes.com/2022/09/28/technology/crypto-hacks-defi.html The Crypto World Is on Edge After a String of Hacks - The New York Times] (Nov 30, 2022)</ref>		<ref name="nytimes-9826">[https://www.nytimes.com/2022/09/28/technology/crypto-hacks-defi.html The Crypto World Is on Edge After a String of Hacks - The New York Times] (Nov 30, 2022)</ref>
			<ref name="nytimes-9827">[https://www.nytimes.com/2022/06/30/business/north-korea-crypto-hack.html How North Korea Used Crypto to Hack Its Way Through the Pandemic - The New York Times] (Nov 30, 2022)</ref>
	<ref name="nytimes-9827">[https://www.nytimes.com/2022/06/30/business/north-korea-crypto-hack.html How North Korea Used Crypto to Hack Its Way Through the Pandemic - The New York Times] (Nov 30, 2022)</ref></references>		</references>

Azoundria at 21:15, 10 April 2023

2023-04-10T21:15:10Z

← Older revision		Revision as of 15:15, 10 April 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/axieinfinityunauthorizedtreasuryaccess.php}}		{{Imported Case Study 2\|source=https://www.quadrigainitiative.com/casestudy/axieinfinityunauthorizedtreasuryaccess.php}}
			{{Unattributed Sources}}

	[[File:Axieinfinity.jpg\|thumb\|Axie Infinity]]Axie Infinity is a play-to-earn game with $4b in NFT sales. Rather than set up a proper multi-signature wallet, the keys were split between a small number of validators, and additional access was available for someone who no longer needed it. A hacker managed to gain access to 5 of the 9 keys and made off with $625m worth of Ethereum and USDC.		[[File:Axieinfinity.jpg\|thumb\|Axie Infinity]]Axie Infinity is a play-to-earn game with $4b in NFT sales. Rather than set up a proper multi-signature wallet, the keys were split between a small number of validators, and additional access was available for someone who no longer needed it. A hacker managed to gain access to 5 of the 9 keys and made off with $625m worth of Ethereum and USDC.

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.<ref name="twitterevents-7732" /><ref name="businessinsidermarkets-7733" /><ref name="businessinsidermarkets-7734" /><ref name="roninblockchainsubstack-7735" /><ref name="treasurydepartment-7736" /><ref name="axiesubstack-7737" /><ref name="etherscan-7738" /><ref name="etherscan-7739" /><ref name="etherscan-7740" /><ref name="businessinsidermarkets-7741" /><ref name="businessinsidermarkets-7742" /><ref name="czbinancetwitter-7743" /><ref name="philrosenntwitter-7744" /><ref name="wikipedia-7745" /><ref name="axieinfinity-7746" /><ref name="axieinfinitywhitepaper-7747" /><ref name="yahoofinance-7725" /><ref name="youtube-8054" /><ref name="youtube-8160" /><ref name="gadgets360-8151" /><ref name="nytimes-9826" /><ref name="nytimes-9827" />

	== About Axie Infinity ==		== About Axie Infinity ==
Line 92:		Line 93:
	!Description		!Description
	\|-		\|-
	\|March 23rd, 2022 7:29:09 AM		\|March 23rd, 2022 7:29:09 AM MDT
	\|Main Event		\|Main Event
	\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
Line 119:		Line 120:
	== Ongoing Developments ==		== Ongoing Developments ==
	What parts of this case are still remaining to be concluded?		What parts of this case are still remaining to be concluded?
			== General Prevention Policies ==
			A proper multi-signature storage has all keys offline and held by separate individuals. To store all funds in a hot wallet setup, with limited independence between the validators is significantly less secure, as was demonstrated here.
			== Individual Prevention Policies ==
			{{Prevention:Individuals:Placeholder}}

			{{Prevention:Individuals:End}}

	== Prevention Policies ==		== Platform Prevention Policies ==
	A proper multi-signature storage has all keys offline and held by separate individuals. To store all funds in a hot wallet setup, with limited independence between the validators is significantly less secure, as was demonstrated here.		{{Prevention:Platforms:Placeholder}}

			{{Prevention:Platforms:End}}

			== Regulatory Prevention Policies ==
			{{Prevention:Regulators:Placeholder}}

			{{Prevention:Regulators:End}}

	== References ==		== References ==
	[https://twitter.com/i/events/1510264041289179140 A hacker just stole over $600 million in crypto. Experts explain the historic swindle — and why cyberattacks shouldn't discourage adoption of digital assets.] (Apr 4)		<references><ref name="twitterevents-7732">[https://twitter.com/i/events/1510264041289179140 A hacker just stole over $600 million in crypto. Experts explain the historic swindle — and why cyberattacks shouldn't discourage adoption of digital assets.] (Apr 4, 2022)</ref>

	[https://markets.businessinsider.com/news/currencies/axie-infinity-hack-ronin-network-crypto-adoption-eth-blockchain-2022-4 Axie Infinity Hack Shouldn't Discourage Crypto Adoption, Experts Say] (May 21)		<ref name="businessinsidermarkets-7733">[https://markets.businessinsider.com/news/currencies/axie-infinity-hack-ronin-network-crypto-adoption-eth-blockchain-2022-4 Axie Infinity Hack Shouldn't Discourage Crypto Adoption, Experts Say] (May 21, 2022)</ref>

	[https://markets.businessinsider.com/news/currencies/crypto-hack-ronin-network-heist-cybercrime-cryptocurrency-axie-infinity-polynetwork-2022-3 One of the Largest Crypto Hacks Ever Hits Ronin Network] (May 21)		<ref name="businessinsidermarkets-7734">[https://markets.businessinsider.com/news/currencies/crypto-hack-ronin-network-heist-cybercrime-cryptocurrency-axie-infinity-polynetwork-2022-3 One of the Largest Crypto Hacks Ever Hits Ronin Network] (May 21, 2022)</ref>

	[https://roninblockchain.substack.com/p/community-alert-ronin-validators https://roninblockchain.substack.com/p/community-alert-ronin-validators] (May 21)		<ref name="roninblockchainsubstack-7735">[https://roninblockchain.substack.com/p/community-alert-ronin-validators https://roninblockchain.substack.com/p/community-alert-ronin-validators] (May 21, 2022)</ref>

	[https://home.treasury.gov/policy-issues/financial-sanctions/recent-actions/20220414 North Korea Designation Update \| U.S. Department of the Treasury] (May 21)		<ref name="treasurydepartment-7736">[https://home.treasury.gov/policy-issues/financial-sanctions/recent-actions/20220414 North Korea Designation Update \| U.S. Department of the Treasury] (May 21, 2022)</ref>

	[https://axie.substack.com/p/funding https://axie.substack.com/p/funding] (May 21)		<ref name="axiesubstack-7737">[https://axie.substack.com/p/funding https://axie.substack.com/p/funding] (May 21, 2022)</ref>

	[https://etherscan.io/tx/0xc28fad5e8d5e0ce6a2eaf67b6687be5d58113e16be590824d6cfa1a94467d0b7 https://etherscan.io/tx/0xc28fad5e8d5e0ce6a2eaf67b6687be5d58113e16be590824d6cfa1a94467d0b7] (May 21)		<ref name="etherscan-7738">[https://etherscan.io/tx/0xc28fad5e8d5e0ce6a2eaf67b6687be5d58113e16be590824d6cfa1a94467d0b7 https://etherscan.io/tx/0xc28fad5e8d5e0ce6a2eaf67b6687be5d58113e16be590824d6cfa1a94467d0b7] (May 21, 2022)</ref>

	[https://etherscan.io/tx/0xed2c72ef1a552ddaec6dd1f5cddf0b59a8f37f82bdda5257d9c7c37db7bb9b08 https://etherscan.io/tx/0xed2c72ef1a552ddaec6dd1f5cddf0b59a8f37f82bdda5257d9c7c37db7bb9b08] (May 21)		<ref name="etherscan-7739">[https://etherscan.io/tx/0xed2c72ef1a552ddaec6dd1f5cddf0b59a8f37f82bdda5257d9c7c37db7bb9b08 https://etherscan.io/tx/0xed2c72ef1a552ddaec6dd1f5cddf0b59a8f37f82bdda5257d9c7c37db7bb9b08] (May 21, 2022)</ref>

	[https://etherscan.io/address/0x098b716b8aaf21512996dc57eb0615e2383e2f96 https://etherscan.io/address/0x098b716b8aaf21512996dc57eb0615e2383e2f96] (May 21)		<ref name="etherscan-7740">[https://etherscan.io/address/0x098b716b8aaf21512996dc57eb0615e2383e2f96 https://etherscan.io/address/0x098b716b8aaf21512996dc57eb0615e2383e2f96] (May 21, 2022)</ref>

	[https://markets.businessinsider.com/news/currencies/axie-infinity-crypto-heist-reimburse-ronin-tokens-skymavis-hacker-attack-2022-3 Victims of $600 Million Crypto Heist Will Be Reimbursed: Report] (May 21)		<ref name="businessinsidermarkets-7741">[https://markets.businessinsider.com/news/currencies/axie-infinity-crypto-heist-reimburse-ronin-tokens-skymavis-hacker-attack-2022-3 Victims of $600 Million Crypto Heist Will Be Reimbursed: Report] (May 21, 2022)</ref>

	[https://markets.businessinsider.com/news/currencies/binance-hack-axie-infinity-game-north-korea-blockchain-crypto-fbi-2022-4 Binance Seizes $5.8 Million From $620 Million Axie Infinity Hack] (May 21)		<ref name="businessinsidermarkets-7742">[https://markets.businessinsider.com/news/currencies/binance-hack-axie-infinity-game-north-korea-blockchain-crypto-fbi-2022-4 Binance Seizes $5.8 Million From $620 Million Axie Infinity Hack] (May 21, 2022)</ref>

	[https://twitter.com/cz_binance/status/1517385438469791749 @cz_binance Twitter] (May 21)		<ref name="czbinancetwitter-7743">[https://twitter.com/cz_binance/status/1517385438469791749 @cz_binance Twitter] (May 21, 2022)</ref>

	[https://twitter.com/philrosenn/status/1510261235740254209 @philrosenn Twitter] (May 21)		<ref name="philrosenntwitter-7744">[https://twitter.com/philrosenn/status/1510261235740254209 @philrosenn Twitter] (May 21, 2022)</ref>

	[https://en.wikipedia.org/wiki/Axie_Infinity Axie Infinity - Wikipedia] (May 21)		<ref name="wikipedia-7745">[https://en.wikipedia.org/wiki/Axie_Infinity Axie Infinity - Wikipedia] (May 21, 2022)</ref>

	[https://axieinfinity.com/ https://axieinfinity.com/] (May 21)		<ref name="axieinfinity-7746">[https://axieinfinity.com/ https://axieinfinity.com/] (May 21, 2022)</ref>

	[https://whitepaper.axieinfinity.com/ Axie Infinity - Axie Infinity] (May 21)		<ref name="axieinfinitywhitepaper-7747">[https://whitepaper.axieinfinity.com/ Axie Infinity - Axie Infinity] (May 21, 2022)</ref>

	[https://finance.yahoo.com/news/trezor-issues-data-breach-warning-160241180.html Trezor Issues Data Breach Warning As Users Cite Phishing Attacks] (May 21)		<ref name="yahoofinance-7725">[https://finance.yahoo.com/news/trezor-issues-data-breach-warning-160241180.html Trezor Issues Data Breach Warning As Users Cite Phishing Attacks] (May 21, 2022)</ref>

	[https://www.youtube.com/watch?v=8dzMOuEjFIY The LUNA and UST crash — WTF happened? Will they recover? \| The Market Report - YouTube] (Jun 18)		<ref name="youtube-8054">[https://www.youtube.com/watch?v=8dzMOuEjFIY The LUNA and UST crash — WTF happened? Will they recover? \| The Market Report - YouTube] (Jun 18, 2022)</ref>

	[https://youtu.be/8dzMOuEjFIY?t=2340 The LUNA and UST crash — WTF happened? Will they recover? \| The Market Report - YouTube] (Jun 20)		<ref name="youtube-8160">[https://youtu.be/8dzMOuEjFIY?t=2340 The LUNA and UST crash — WTF happened? Will they recover? \| The Market Report - YouTube] (Jun 20, 2022)</ref>

	[https://gadgets360.com/cryptocurrency/news/bored-apes-yacht-club-hack-instagram-discord-nfts-worth-million-stolen-2920958 Bored Ape Yacht Club Instagram, Discord Hacked, NFTs Worth $13.7 Million Stolen \| Technology News] (Jun 20)		<ref name="gadgets360-8151">[https://gadgets360.com/cryptocurrency/news/bored-apes-yacht-club-hack-instagram-discord-nfts-worth-million-stolen-2920958 Bored Ape Yacht Club Instagram, Discord Hacked, NFTs Worth $13.7 Million Stolen \| Technology News] (Jun 20, 2022)</ref>

	[https://www.nytimes.com/2022/09/28/technology/crypto-hacks-defi.html The Crypto World Is on Edge After a String of Hacks - The New York Times] (Nov 30)		<ref name="nytimes-9826">[https://www.nytimes.com/2022/09/28/technology/crypto-hacks-defi.html The Crypto World Is on Edge After a String of Hacks - The New York Times] (Nov 30, 2022)</ref>

	[https://www.nytimes.com/2022/06/30/business/north-korea-crypto-hack.html How North Korea Used Crypto to Hack Its Way Through the Pandemic - The New York Times] (Nov 30)		<ref name="nytimes-9827">[https://www.nytimes.com/2022/06/30/business/north-korea-crypto-hack.html How North Korea Used Crypto to Hack Its Way Through the Pandemic - The New York Times] (Nov 30, 2022)</ref></references>