Galxe Frontend Attacked, Funds Compromised Less Than $200,000

On October 6th, several users reported that their assets were stolen after authorizing transactions on the GALXE platform using wallet links.

According to blockchain investigator ZashXBT, the stolen funds from Galxe have been transferred to the following address: 0x4103baBcFA68E97b4a29fa0b3C94D66afCF6163d. This appears to be the same hacker involved in the recent Balancer frontend attack.

As of now, Galxe has posted a tweet stating that its website is offline and will be relaunched once the correct DNS records have propagated globally. If users have not authorized any transactions linking their wallets to Galxe after 9:00 PM Beijing time on October 6th, their funds and information are secure.

Galxe had its domain registered through Dynadot, and the domain https://Galxe.com was previously compromised by unauthorized individuals who temporarily gained control of the Dynadot account. However, on October 7th at 12:00 AM Beijing time, Galxe regained ownership of the domain and worked with Dynadot to ensure the security of the account.

Preliminary assessments suggest that the total amount of lost funds may be approximately or less than $200,000. The team has been in contact with relevant law enforcement authorities and will soon share a complete report and fund recovery plan.