🚨🚨 Galxe Hacked Warning

[Gladitorcomeback]

Galxe has been hacked and scammer hacked big money and still website is nit recovered. If you have connected your wallet, instantly disconnect wallet and removed all approvals.

🚨 Attention Community! At the moment, the Galxe website is down and we're working on repairing the issue. Please do not connect your wallet to Galxe for the timebeing.

The issue will be resolved shortly, thank you for your patience!

Source:
https://twitter.com/Galxe/status/1710305141016944654?s=19

Hacker Wallet address:
https://debank.com/profile/0x4103babcfa68e97b4a29fa0b3c94d66afcf6163d/

So far hacked 150k$


For those who don't know about this platform "Galxe is web3 based platform which offer projects to connect with audience. As far I know this is biggest platform which has partnerships with almost all big projects including Optimism, Arbitrum, Layerzero and many others. People use it to claim airdrop/NFT/Oat/Whitelist.

[1714251794]

1714251794

[1714251794]

1714251794

[1714251794]

1714251794

[coin-investor]

For those who don't know about this platform "Galxe is web3 based platform which offer projects to connect with audience. As far I know this is biggest platform which has partnerships with almost all big projects including Optimism, Arbitrum, Layerzero and many others. People use it to claim airdrop/NFT/Oat/Whitelist.

Yes last year I used to claim free NFT here from one project, I stopped doing this claim because I cannot keep up with thousands of those who wants to claim I always ended getting nothing I disconnect my wallet here to stop the notification of a new NFT to claim, this platform is huge, there thousands of connected wallet here.

This is the risk of connecting your wallet in a platform be sure to use new wallet if you're going to connect it to a contract based platform, you never know what's going to to happen, hackers are very active in targeting big platform like Galxe.

[AnonBitCoiner]

According to Galxe latest tweet report, they have get access back to the theirs domain..Users further Funds are now safe now however if any wallet gave permission to hacker address then revoke is necessary. Furthermore still avoid wallet connect as still there is lot of protection needed. Website is under maintenance because Galxe team is checking it for security check and other serveral operation.

Galxe ask to revoke address access. You can check the contract to which you gives permission and easily revoke it using the following website  https://revoke.cash/
Hacker address: 0x0000eaab14253e1421aef4F48eE539F2653C0000
Source twitter tweet

Numerous hacking incident have occured in this years and still big projects has low protection and there not introduced any Solid security system for these projects. Need a very strong security system to fully minimize the risk of wallet compromisation and site hacking.

[salad daging]

It is very sad that there have been many hacks, especially since Galxe is a platform that is widely used for various communities from other projects connected to them.

No platform is safe, there are still vulnerabilities from them and cannot anticipate if this has happened. When customer funds are lost, will this be fully covered by Galxe?

Galxe ask to revoke address access. You can check the contract to which you gives permission and easily revoke it using the following website  https://revoke.cash/
Hacker address: 0x0000eaab14253e1421aef4F48eE539F2653C0000
Source twitter tweet

So there are two hacker wallets?
The wallet address you showed doesn't have any assets in it.

[tvplus006]

...Galxe ask to revoke address access. You can check the contract to which you gives permission and easily revoke it using the following website  https://revoke.cash/
Hacker address: 0x0000eaab14253e1421aef4F48eE539F2653C0000...

Revoke has simplified such verification as much as possible by making a special page to identify the vulnerability of your wallet in various networks - https://revoke.cash/exploits/galxe The official announcement was posted on Twitter - https://twitter.com/revokecash/status/1710677770492129672?s=46&t=Jk8BljH3_YIEKACgPoIgCA

[asriloni]

Im sorry for those who were losing their money but finally this garbage site is dead. The team looked like very amateur caused by they can't even solve the problem immediately. People shall leave this platform but i guess if majority of hunters were using the empty wallet.
That's why the hacker was not able to farming as much as when they were hacking defi or another platform like exchange site.

It makes me curious to see how there are still thousands of people keep do their farming quests.

[bangjoe]

I was quite surprised that Galxe, the center of the web3 airdrop, was hacked.
It is said that if we don't do any activity on galxe or connect wallets to galxe before October 6th then we can be safe, and I personally fortunately did not do any activity on galxe from the beginning of October and I think I am safe from this incident.

They admit this is their mistake and they will reimburse their customers affected by this hack, I think they are well responsible for what happened yesterday.

[abel1337]

Luckily I haven't interacted with this using all of my wallet. This is well used platform for those who are airdrop hunters, I wonder if the hack affected those who connected their wallet in the platform. I noticed that airdrop platforms are the one who are being attacked now by the hackers. I've saw on twitter that there are other similar platforms that are hacked and encouraging everyone to revoke the access to their wallet.

This is why we should use other wallet to connect to platforms. This shows how easily our wallet can get wiped if incident like this happen again.

[cryptomaniac_xxx]

I was quite surprised that Galxe, the center of the web3 airdrop, was hacked.
It is said that if we don't do any activity on galxe or connect wallets to galxe before October 6th then we can be safe, and I personally fortunately did not do any activity on galxe from the beginning of October and I think I am safe from this incident.

They admit this is their mistake and they will reimburse their customers affected by this hack, I think they are well responsible for what happened yesterday.

I don't think though that there should be surprises as

- hackers are everywhere, they are looking for anything that they can exploit
- not blaming Galxe but when they become so huge, maybe they didn't look at this possibility that one day they will be the target.

But the latest news is that they are now taking control and fully recovered and they are trying to make the website more secure. However, it's obviously the damage has been done, many of their customers have lost a lot of their hard earn money. Although there is this "claim losses", we will have to wait for the official word from the team itself.

[nelson4lov]

Luckily I haven't interacted with this using all of my wallet. This is well used platform for those who are airdrop hunters, I wonder if the hack affected those who connected their wallet in the platform

~Snipped

Apparently, not everyone who have at some point in the past interacted with their platform was part of the hack. Revoke.cash already made a tool for users to verify whether their wallets were part of the compromised wallets during the hack: https://revoke.cash/exploits/galxe?chainId=1

Galxe already wrote a post-mortem: https://blog.galxe.com/oct-6th-dns-security-incident-statement-0cfc789bf9dc

It was a Frontend hack that originated with some impersonation and involved some redirection of the website to a phished version and users that interacted with that phished version were the ones that got compromised.

[cheezcarls]

Mine was just fine. As soon as I receive the notification from Galxe's X account regarding the hack, I took action immediately of disconnecting my wallet from their website. It's a blessing in disguise about me turning on notifications in Galxe's updates in X, in which I've done my homework.

As I have triple checked everything until today my wallet is healthy. No unauthorized transactions or balance drains happening in it.

The address that was mentioned by Galxe for me to revoke, good thing it was not on my records for authorizing signatures or so.

Make sure that from time to time when we are not using any Dapps, always make a habit of disconnecting and revoking permissions. Web3 still has long ways to go to ensure that this hacking incidents won't happen again.

But stay SAFU and vigilant always as hackers are not stopping to find new ways to infiltrate our hard-earned money.

[bangjoe]

I was quite surprised that Galxe, the center of the web3 airdrop, was hacked.
It is said that if we don't do any activity on galxe or connect wallets to galxe before October 6th then we can be safe, and I personally fortunately did not do any activity on galxe from the beginning of October and I think I am safe from this incident.

They admit this is their mistake and they will reimburse their customers affected by this hack, I think they are well responsible for what happened yesterday.

I don't think though that there should be surprises as

- hackers are everywhere, they are looking for anything that they can exploit
- not blaming Galxe but when they become so huge, maybe they didn't look at this possibility that one day they will be the target.

But the latest news is that they are now taking control and fully recovered and they are trying to make the website more secure. However, it's obviously the damage has been done, many of their customers have lost a lot of their hard earn money. Although there is this "claim losses", we will have to wait for the official word from the team itself.

Naturally, you weren't surprised because you probably didn't have much activity in Galxe, which made you skeptical enough to view this incident as a normal occurrence of a growing company and a hack like any other.

-I think they were aware of the potential for hacking, but as usual when web developers are blind enough to feel that their work is secure enough, and usually it is very difficult to find weaknesses in security when we work regularly according to procedures, but it must be understood that there must be weaknesses, because nothing man-made is perfect.

Yes in their last announcement on social media platform X they said that for "account recovery/loss claims" wait until they give official notice for that.

[Victorik]

Very disheartening to see and hear these incidence of hacking which is becoming too rampant lately.
I am sure a lot of person doing airdrops must have connected their wallets to this website. And if so, they should revoke asap to keep themselves safe.

[cryptoaddictchie]

Very disheartening to see and hear these incidence of hacking which is becoming too rampant lately.
I am sure a lot of person doing airdrops must have connected their wallets to this website. And if so, they should revoke asap to keep themselves safe.

As much as we wanted to avoid but they didnt take security wisely. Galxe should knew how big their users was and one thing or the other the hackers will try to attack them and they muat have secure their platform cause a lot of people are into airdrops and keep increasing. Well do hope they could remedy the stolen funds and reimburse those who got affected by the hacked.

[Xal0lex]

Surprisingly, so much time has passed, official statements and precautions from Galxe have already been released, but funds are still flowing into the hacker's wallet to this day. People who do not follow the industry are always in a special risk zone, sometimes you should read the news and use Revoke, or similar services.

[Best-mary]

For those who don't know about this platform "Galxe is web3 based platform which offer projects to connect with audience. As far I know this is biggest platform which has partnerships with almost all big projects including Optimism, Arbitrum, Layerzero and many others. People use it to claim airdrop/NFT/Oat/Whitelist.

Yes last year I used to claim free NFT here from one project, I stopped doing this claim because I cannot keep up with thousands of those who wants to claim I always ended getting nothing I disconnect my wallet here to stop the notification of a new NFT to claim, this platform is huge, there thousands of connected wallet here.

This is the risk of connecting your wallet in a platform be sure to use new wallet if you're going to connect it to a contract based platform, you never know what's going to to happen, hackers are very active in targeting big platform like Galxe.

Lucky you man! Seems decentralised exchange ain't safe either. I always say it we should play it safe. Guess I'll stick with the centralised exchange and get through some  decentralised opportunities using B-swap

[albon]

Surprisingly, so much time has passed, official statements and precautions from Galxe have already been released, but funds are still flowing into the hacker's wallet to this day. People who do not follow the industry are always in a special risk zone, sometimes you should read the news and use Revoke, or similar services.

The reason for the flow of funds into the hacker's wallet may be that the victims who linked their wallets did not use the "Revoke" feature to unlink the wallet to the malicious contract from the transaction they signed on the phishing site to which they and affected Galxe customers were directed. Consequently, they deposited more funds without being aware of the hacking incident that occurred, believing that their wallets and assets were still secure. Therefore, they proceeded to deposit additional assets, and scammers were able to steal them as well.

You pointed out an important thing that may save a lot of similar scam/hacking incidents in the future, which is following the industry and popular news and following up and activating notifications for the project social accounts that the person is involved with because they may publish something important, as happened to Galxe.

[Gladitorcomeback]

Surprisingly, so much time has passed, official statements and precautions from Galxe have already been released, but funds are still flowing into the hacker's wallet to this day. People who do not follow the industry are always in a special risk zone, sometimes you should read the news and use Revoke, or similar services.

The reason for the flow of funds into the hacker's wallet may be that the victims who linked their wallets did not use the "Revoke" feature to unlink the wallet to the malicious contract from the transaction they signed on the phishing site to which they and affected Galxe customers were directed. Consequently, they deposited more funds without being aware of the hacking incident that occurred, believing that their wallets and assets were still secure. Therefore, they proceeded to deposit additional assets, and scammers were able to steal them as well.

Two reason, hacker still able to access many accounts. One which you already mentioned that many wallets is still compromised where they gives permission to the hacker contract and still not revoked.
The second one which mentioned by Galxe in their tweet. Galxe has updated their website while many user still seeing the phising site(old) due to DNS propagation and there are some people who are still connecting accounts 
Source tweet

I have followed all social links of platforms i used daily and Gakxe,Taskon,Layer3 are some which I used frequently. If anyone has followed, I hope he would be safe as the news of hacking was disclosed at the twitter. I disconnected my wallet in no time.  I believe that more than 10% people still don't know about this incident because they are just airdrop hunters and  have no interest in learning.

[Victorik]

Very disheartening to see and hear these incidence of hacking which is becoming too rampant lately.
I am sure a lot of person doing airdrops must have connected their wallets to this website. And if so, they should revoke asap to keep themselves safe.

As much as we wanted to avoid but they didnt take security wisely. Galxe should knew how big their users was and one thing or the other the hackers will try to attack them and they muat have secure their platform cause a lot of people are into airdrops and keep increasing. Well do hope they could remedy the stolen funds and reimburse those who got affected by the hacked.

Not necessarily so that they didn't take their security serious. Just know that these hackers are always working tirelessly looking for loopholes. But I am sure they will be stepping up their security architecture to prevent future hacks.

[AakZaki]

I once connected to Galxe to claim some free NFTs and when I heard the news that Galxe had been hacked, I immediately revoked the connected address.
It's quite dangerous if you don't revoke it because it will affect my assets.
It is getting easier to hack on several platforms that are widely used by users. A good suggestion is not to use the main wallet to carry out other NFT or airdrop claiming activities that require connecting a wallet, because it will be very vulnerable if this kind of hack occurs.