Earlier today, yet another crypto hack occurred this time it was Galxes turn, a widely known crypto giveaway and airdrop platform. They to a security breach on their website. So far this has lead to around 100k taken from users of the site. Galxe tweeted out about the breach via a tweet, in which they confirmed the compromise of their DNS records at
Galxe then tweeted again, reassuring users that they had regained control of their website around but not to interact with it and take steps to protect your wallet. It is important to note that Galxe mentioned their intention to reimburse affected users, so there is hope for those directly impacted. If you're a user of the site and haven't already done so follow these steps as a precaution.
- Access your wallet linked with Galxe and disconnect it from their website. You can do this by clicking on the three dots in the top right corner, navigating to connected apps, and selecting the option to disconnect.
- Next, visit Revoke.cash and check if there are any connections to the address 0x0000eaab14253e1421aef4F48eE539F2653C0000 and 0x4103babcfa68e97b4a29fa0b3c94d66afcf6163d. If any connections exist, promptly revoke permissions.
- Be vigilant and steer clear of any phishing sites attempting to imitate Galxe, as such fraudulent websites pop up after every hack same for "support" reaching out to you
- And if you're paranoid still I suggest moving any funds to a new wallet
The Galxe team has stated "As long as you didn't authorize any transactions with connected wallets on Galxe after 6 am PST on October 6th, your funds and information remain secure." so it seems like the attacker didn't access any funds that weren't in limbo before then. This is still an ongoing situation though so its unclear the full scope of the exploit still.
As i write this you can see they are currently moving funds to angeldrainer.eth lol yeaaa be safe out there guys and thanks for reading.
