4 ms·

> 4. An attacker obtained 5 of 9 keys, which is the signing threshold. How?

• onebot 5y ago
  Exactly. Sounded like the obtained four keys and then used an open backdoor RPC call to obtain the fifth.
• tshaddox 5y ago
  > The attacker used hacked private keys in order to forge fake withdrawals. > The attacker managed to get control over Sky Mavis’s four Ronin Validators and a third-party validator run by Axie DAO. Easiest explanation: at least one Sky Mavis employee and one Axie Infinity employee who have access to those private keys got together and took all the funds. Perhaps it was only one employee; it's not clear to me what the difference between Axie Infinity and Sky Mavis is (there isn't actually an Axie DAO, there's just a web page where they say they plan to be a DAO in 2023).
  • JumpCrisscross 5y ago
    > Easiest explanation: at least one Sky Mavis employee and one Axie Infinity employee who have access to those private keys got together and took all the funds Easier explanation: they were all in a Dropbox or something stupid like that.
    • tmp_anon_22 5y ago
      Is there a chance they were all loaded into application memory?
      • anchpop 5y ago
        They shouldn't even all be on the same computer. Ideally they would be engraved in titanium and inside people's safe deposit boxes
      • deleted 5y ago
        [deleted]
    • rmbyrro 5y ago
      Most likely that
  • ejanus 5y ago
    I was thinking that Sky Mavis owns Axie Infinity. Is that wrong?
  • DougMellon 5y ago
    The current address holding the funds: https://etherscan.io/address/0x098b716b8aaf21512996dc57eb0615e2383e2f96 https://etherscan.io/address/0x098b716b8aaf21512996dc57eb061...