Gala Games 承认在 2100 万美元的攻击后内部控制失败，并承诺迅速采取行动

Gala Games 表示，它对 5 月 20 日发生的重大安全漏洞迅速做出了反应，该漏洞导致价值 2100 万美元的 GALA 代币未经授权出售

Gala Games has swiftly responded to the significant security breach on May 20 that led to the unauthorized sale of $21 million worth of GALA tokens and the “effective burn” of an additional 4.4 billion tokens.

Gala Games 对 5 月 20 日发生的重大安全漏洞迅速做出了反应，该漏洞导致价值 2100 万美元的 GALA 代币未经授权出售，并“有效销毁”了另外 44 亿枚代币。

The exploit, which was quickly identified and contained by Gala Games, has prompted the company to take immediate action and enhance its security measures.

Gala Games 很快发现并遏制了该漏洞，促使该公司立即采取行动并加强安全措施。

In a May 21 post on social media, Gala Games acknowledged the incident, stating:

Gala Games 在 5 月 21 日在社交媒体上发布的帖子中承认了这一事件，并表示：

“We messed up our internal controls…This shouldn’t have happened, and we are taking steps to ensure it doesn’t ever [happen] again.”

“我们搞乱了内部控制……这种事不应该发生，我们正在采取措施确保这种情况不再发生。”

The company assured its community that the compromise was swiftly identified and contained within 45 minutes, securing the GALA contract and removing unauthorized access.

该公司向社区保证，该漏洞已在 45 分钟内迅速识别并包含在内，从而确保了 GALA 合同的安全并消除了未经授权的访问。

Gala Games also emphasized that its Ethereum contract for GALA remained secure and protected by a multi-signature wallet.

Gala Games 还强调，其 GALA 以太坊合约仍然安全，并受到多重签名钱包的保护。

Additionally, the team said it has identified the culprit behind the exploit and is working with law enforcement around the world to apprehend them.

此外，该团队表示已经确定了该漏洞背后的罪魁祸首，并正在与世界各地的执法部门合作逮捕他们。

The company is also addressing the impact on their daily distribution process, with plans to hold a node vote to determine the next steps, allowing the community to decide the path forward.

该公司还在解决对其日常分配流程的影响，并计划举行节点投票来确定后续步骤，让社区决定前进的道路。

The Impact

影响

Initial reports of the exploit indicated that over 5 billion $GALA tokens were minted during the hack or insider theft.

该漏洞的初步报告表明，在黑客攻击或内部盗窃期间铸造了超过 50 亿美元的 GALA 代币。

Solidity developer 0xquit noted that the attacker utilized an admin address to mint the tokens, speculating that either an external hacker or a rogue address owner was responsible.

Solidity 开发人员 0xquit 指出，攻击者利用管理地址来铸造代币，推测是外部黑客或流氓地址所有者所为。

The exploited address was quickly blocklisted, preventing further token minting without access to another admin address.

被利用的地址很快被列入黑名单，防止在无法访问另一个管理地址的情况下进一步铸造代币。

The breach caused the value of the $GALA token to decline sharply, dropping from $0.048 to $0.038—a loss of over 20% in less than two hours before recovering to $0.043.

此次泄露导致 $GALA 代币的价值大幅下跌，从 0.048 美元跌至 0.038 美元，不到两个小时的时间损失超过 20%，然后又恢复至 0.043 美元。

Despite these setbacks, the GALA token, valued at $1.56 billion, remains one of the top 70 largest cryptocurrencies by market capitalization.

尽管遇到这些挫折，价值 15.6 亿美元的 GALA 代币仍然是市值最大的 70 种加密货币之一。

As the investigation into the security breach continues, Gala Games is committed to enhancing its security measures and maintaining transparency with its community.

随着对安全漏洞的调查继续进行，Gala Games 致力于加强其安全措施并保持社区的透明度。