Galxe Website Hacked

This is a developing story. Last updated on October 6th, 2023 at 1:01pm CDT.

On October 6th at 9:44am CDT, Galxe announced that their website was "down", quickly followed by a reply for users to NOT connect their wallets or approve transactions, and to disconnect their wallets if they were already connected.

It became apparent as the morning wore on that the Galxe site was the victim of some sort of hack. Galxe's X post described it as a security breach affecting the DNS record of their domain name.

Unfortunately, as time has passed, it's become clear that many Galxe users' wallets have been affected, with dozens of reports on X and on Discord that wallets have been drained. On Discord, the Galxe team has recommended that users utilize Revoke Cash and remove approvals for the following three addresses that have been identified as the attacker:

• 0x0000d38a234679F88dd6343d34E26DCB50C30000
• 0x0000eaab14253e1421aef4F48eE539F2653C0000
• 0x00008c6Dc619b0ea53dd8d02B58Bb726aFc40000

As of 11:55am CDT, Galxe has released their latest X post with the most up-to-date information, including instructions for Galxe users who have noticed any suspicious wallet activity to contact the team via the Galxe Discord. A reply in the X post thread goes on to say that the team has regained control of the domain and that they are running security checks before reopening the site.

Of course, the question on most users' minds is: reimbursement. While Galxe has not given explicit information regarding refunding the funds lost by Galxe users, they did refer to it in their latest post (at 12:26pm CDT) on Discord. Essentially, the refund plan and more details about the hack are planned on being released to the public later on today.

I'll be keeping an eye on these developments throughout the day. Right now, it *appears* that your wallet is only in danger if you interacted with the fraudulent approvals on the site earlier this morning, though I'd like to recommend folks take this time to examine which sites your wallet(s) are connected to and revoke permissions to anything you don't recognize or no longer use. As always, DYOR!

Disclaimer: I am not a financial advisor. It's your responsibility to do extensive research and consult a professional before investing. 

Like this article? Find me on...

Twitter: @Valdyr | Torum: @Valdyr | Publish0x: @Valdyr | Article: @Valdyr | Phaver: @Valdyr | Bulb: @Valdyr

Valdyr is a "crypto-curious" blogger living in Texas with her husband and their ancient dachshund, Henry. When she's not working as an audio/visual technician or stagehand, you'll frequently find her traveling, hiking or enjoying a good craft beer. For more reading, check out www.laurahofford.com/blog/