The Pokémon-like Battler Game Aurory Experiences Exploit
Aurory, a popular Pokémon-like battler game, fell victim to an exploit on Sunday that allowed the attacker to withdraw approximately 600,000 AURY tokens worth around $830,000. As a result, the developers disabled the SyncSpace blockchain bridge that connects the game to Solana and Arbitrum.
According to Aurory Executive Producer Jonathan Campeau, the team is currently working on a global patch for its backend services to resolve the issue. The exploit was a race condition attack on the off-chain marketplace, allowing users to send multiple buy purchase requests simultaneously.
Marketplace Exploit Causes Liquidity Plunge and Price Drop
The marketplace exploit led to an 80% plunge in AURY-USDC liquidity on Camelot, a decentralized exchange. Additionally, the price of AURY dropped by about 17% since early Sunday. The value of the stolen tokens would now be approximately $690,000.
However, there is some good news as the price of AURY has rebounded to around $1.15 per token after initially dipping to $0.95.
No User Funds or NFTs Stolen
The Aurory team clarified on Twitter that no user funds or NFTs were stolen or at risk during the marketplace exploit. The attacker was able to withdraw funds from an Aurory developer team wallet and transfer them to Arbitrum.
Aurory’s platform had previously undergone an audit by cybersecurity firm Ottersec, but this particular attack type fell outside their scope. The studio plans to bring its bridge back online once the exploit has been patched.
Prevention and Future Plans
Cybersecurity firm Halborn’s COO David Schwed believes that the marketplace vulnerability could have been prevented. He emphasizes that a third-party audit alone is not enough to maintain high levels of platform security.
Despite this setback, Aurory has been actively developing its gaming ecosystem. The studio is set to launch Seekers of Tokane on the Epic Games Store and has expanded its presence to Arbitrum in addition to Solana.
Hot Take: Aurory Exploit Raises Questions about Platform Security
The recent exploit experienced by Aurory raises concerns about platform security in the crypto gaming industry. While the team is working to resolve the issue and bring its bridge back online, this incident highlights the importance of comprehensive security measures beyond third-party audits.
As crypto games gain popularity and attract more attention, they also become targets for bad actors seeking to exploit vulnerabilities. It is crucial for developers to continually assess and strengthen their security protocols to protect user funds and maintain trust within the community.
By
By
By
By
By