Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/farcanaliquidityproviderwalletbreach.php}} {{Unattributed Sources}} Farcana Logo/HomepageFarcana is a competitive, fast-paced hero shooter, with battles settled on the blockchain in bitcoin. A wallet belonging to one of the liquidity providers for Farcana was breached, and this was reported by the company. The news was picked up and widely distributed, under t..."

2024-09-18T21:02:50Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/farcanaliquidityproviderwalletbreach.php}} {{Unattributed Sources}} thumb|Farcana Logo/HomepageFarcana is a competitive, fast-paced hero shooter, with battles settled on the blockchain in bitcoin. A wallet belonging to one of the liquidity providers for Farcana was breached, and this was reported by the company. The news was picked up and widely distributed, under t..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/farcanaliquidityproviderwalletbreach.php}}
{{Unattributed Sources}}

[[File:Farcana.jpg|thumb|Farcana Logo/Homepage]]Farcana is a competitive, fast-paced hero shooter, with battles settled on the blockchain in bitcoin. A wallet belonging to one of the liquidity providers for Farcana was breached, and this was reported by the company. The news was picked up and widely distributed, under the false understanding that the waller was somehow owned by the Farcana platform itself. The original tweet was deleted and operations of the project resumed.<ref name="slowmisthackedarchive-14420" /><ref name="farcanaofficialtwitter-14455" /><ref name="farcanaofficialtwitterarchive-14456" /><ref name="farcanaofficialtwitter-14457" /><ref name="farcanaofficialtwitter-14458" /><ref name="farcanaofficialtwitter-14459" /><ref name="farcanaofficialtwitter-14460" /><ref name="zachxbttwitter-14461" /><ref name="farcanaofficialtwitter-14462" /><ref name="0xcommitauditstwitter-14463" /><ref name="farcanaofficialtwitter-14464" /><ref name="chainlightiotwitter-14465" /><ref name="certikalerttwitter-14466" /><ref name="polygonscan-14467" /><ref name="arunimshuklatwitter-14468" /><ref name="itsbitcoinworldtwitter-14469" /><ref name="polygonscan-14470" /><ref name="certikalerttwitter-14471" /><ref name="linktree-14472" /><ref name="youtube-14473" /><ref name="farcana-14474" />

== About Farcana ==
"Farcana is an immersive, fast-paced, competitive hero shooter with an emphasis on quick movement and fast, tactical decision-making. While your weapons will do a lot of the talking, achieving victory will require strategic use of your abilities and tight teamwork!"

"Farcana stands as a prominent gaming studio nestled in the heart of the UAE, boasting a collective of over 120 exceptionally skilled professionals, comprising highly experienced game developers and industry experts. Together, we seamlessly intertwine blockchain technology with conventional game development. Our goal is set to elevate player immersion and be a key player in re-defining gaming. Spearheading this endeavor is our team shooter, Farcana, which harnesses the power of web3 technologies. We put the reins of the game economy, marketplace, and asset ownership entirely in the hands of our players. We aim to etch our mark in shaping the future landscape of gaming."

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
"On June 24, the UAE-based blockchain gaming studio Farcana tweeted that one of their FAR wallets was hacked."
{| class="wikitable"
|+Key Event Timeline - Farcana Liquidity Provider Wallet Breach
!Date
!Event
!Description
|-
|June 19th, 2024 10:25:03 AM MDT
|Polygon Blockchain Transaction
|The transaction on the polygon blockchain, as reported by CertiK.
|-
|June 23rd, 2024 7:34:48 PM MDT
|Farcana Tweet Posted
|The Farcana team posts a tweet to notify the community that one of the Farcana wallets has been compromised. This tweet would later be deleted.
|-
|June 24th, 2024 1:50:00 AM MDT
|Tweet Against Fraud
|Farcana notifies the community to be vigilant against fake accounts, which are sharing links.
|-
|June 24th, 2024 6:28:00 AM MDT
|Clarification Tweet
|The Farcana team clarifies that the wallet belonged to one of their liquidity providers and that their system has not been breached.
|-
|June 24th, 2024 10:56:00 PM MDT
|ZachXBT Criticism
|ZachXBT tweets to criticize the project and how they have posted and then deleted their original announcement.
|-
|June 26th, 2024 4:26:00 AM MDT
|Tweet Update
|"The incident is still being investigated and Farcana is working with relevant stakeholders to determine what precisely transpired. However, nothing about the incident compromises the functioning of the project, and is not materially consequential to the price of FAR. This is why operations have resumed."
|}

== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

== Total Amount Lost ==
The total amount lost has been estimated at $880,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
"On June 24, the UAE-based blockchain gaming studio Farcana tweeted that one of their FAR wallets was hacked. On the same day, Farcana tweeted a clarification stating that it was a third-party market maker that was attacked, and the official wallet and FAR smart-contract had not experienced any exploits."

"Security Alert: $FAR Wallet Hacked"

"Although Farcana did not lose any funds directly, a third-party market maker was hacked, resulting in the theft of 23,809,523 FAR tokens valued at nearly $880,000. This incident underscores the vulnerability of third-party services."

"We regret to inform our community that one of the $FAR wallets has been compromised. Our team is working tirelessly to address the breach and ensure the safety of your assets. Deposits to all CEX’es are frozen until the issues solved."

== Ultimate Outcome ==
"Earlier today, Bybit and Gate resumed deposits of FAR. All operations related to the token are back to normal.FAR token is approximately 25% lower in price over the last 5 days, (prior to the incident) and largely in line with the broader market."

"23,809,523 FAR was transferred to 0x9681 before a large amount of tokens were sold

The majority of USDT received from selling was moved to 0x6454

Exploiter still hols ~5.2m FAR tokens"

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="slowmisthackedarchive-14420">[https://web.archive.org/web/20240624184511/https://hacked.slowmist.io/ SlowMist Hacked - SlowMist Zone] (Accessed Jun 25, 2024)</ref>

<ref name="farcanaofficialtwitter-14455">[https://twitter.com/FarcanaOfficial/status/1805051918437233081 @FarcanaOfficial Twitter] (Accessed Jun 28, 2024)</ref>

<ref name="farcanaofficialtwitterarchive-14456">[https://web.archive.org/web/20240624013448/https://twitter.com/FarcanaOfficial/status/1805051918437233081 @FarcanaOfficial Twitter] (Accessed Jun 28, 2024)</ref>

<ref name="farcanaofficialtwitter-14457">[https://twitter.com/FarcanaOfficial/status/1805910567091331493 @FarcanaOfficial Twitter] (Accessed Jun 28, 2024)</ref>

<ref name="farcanaofficialtwitter-14458">[https://twitter.com/FarcanaOfficial/status/1805174799045681283 @FarcanaOfficial Twitter] (Accessed Jun 28, 2024)</ref>

<ref name="farcanaofficialtwitter-14459">[https://twitter.com/FarcanaOfficial/status/1805216387805409642 @FarcanaOfficial Twitter] (Accessed Jun 28, 2024)</ref>

<ref name="farcanaofficialtwitter-14460">[https://twitter.com/FarcanaOfficial/status/1805216504646164741 @FarcanaOfficial Twitter] (Accessed Jun 28, 2024)</ref>

<ref name="zachxbttwitter-14461">[https://twitter.com/zachxbt/status/1805465022920851712 @zachxbt Twitter] (Accessed Jun 28, 2024)</ref>

<ref name="farcanaofficialtwitter-14462">[https://twitter.com/FarcanaOfficial/status/1805146415703994784 @FarcanaOfficial Twitter] (Accessed Jun 28, 2024)</ref>

<ref name="0xcommitauditstwitter-14463">[https://twitter.com/0xCommitAudits/status/1805666120957149613 @0xCommitAudits Twitter] (Accessed Jun 28, 2024)</ref>

<ref name="farcanaofficialtwitter-14464">[https://twitter.com/FarcanaOfficial/status/1805205070654648335 @FarcanaOfficial Twitter] (Accessed Jun 28, 2024)</ref>

<ref name="chainlightiotwitter-14465">[https://twitter.com/ChainLight_io/status/1805279660181537186 @ChainLight_io Twitter] (Accessed Jun 28, 2024)</ref>

<ref name="certikalerttwitter-14466">[https://twitter.com/CertiKAlert/status/1805171670132347168 @CertiKAlert Twitter] (Accessed Jun 28, 2024)</ref>

<ref name="polygonscan-14467">[https://polygonscan.com/tx/0xddba98579036fbc4ba961af2f84d98909fdff4cea819c7abd25dfba6046edd9a Polygon PoS Chain Transaction Hash (Txhash) Details | PolygonScan] (Accessed Jun 28, 2024)</ref>

<ref name="arunimshuklatwitter-14468">[https://twitter.com/arunim_shukla/status/1805192586782511208 @arunim_shukla Twitter] (Accessed Jun 28, 2024)</ref>

<ref name="itsbitcoinworldtwitter-14469">[https://twitter.com/ItsBitcoinWorld/status/1805233583633903677 @ItsBitcoinWorld Twitter] (Accessed Jun 28, 2024)</ref>

<ref name="polygonscan-14470">[https://polygonscan.com/address/0x6454db572ac0cec0f11dc5ec86319ee776b669cf#tokentxns Farcana Exploiter 3 | Address 0x6454db572ac0cec0f11dc5ec86319ee776b669cf | PolygonScan] (Accessed Jun 28, 2024)</ref>

<ref name="certikalerttwitter-14471">[https://twitter.com/CertiKAlert/status/1805171664340074643 @CertiKAlert Twitter] (Accessed Jun 28, 2024)</ref>

<ref name="linktree-14472">[https://linktr.ee/farcana Farcana | Twitter, Instagram, TikTok | Linktree] (Accessed Jun 28, 2024)</ref>

<ref name="youtube-14473">[https://www.youtube.com/watch?v=gdmjbgVolcA - YouTube] (Accessed Jun 28, 2024)</ref>

<ref name="farcana-14474">[https://www.farcana.com/company Company | Boast Your Skills In Farcana, Team-Based Hero Shooter] (Accessed Jun 28, 2024)</ref></references>

Farcana Liquidity Provider Wallet Breach - Revision history