{"id":10770,"date":"2022-03-30T11:30:26","date_gmt":"2022-03-30T11:30:26","guid":{"rendered":"http:\/\/TheNextWeb=1383512"},"modified":"2022-03-30T11:30:26","modified_gmt":"2022-03-30T11:30:26","slug":"the-625m-ronin-blockchain-hack-shows-the-need-for-better-security-in-the-web3-world","status":"publish","type":"post","link":"https:\/\/www.londonchiropracter.com\/?p=10770","title":{"rendered":"The $625M Ronin blockchain hack shows the need for better security in the Web3 world"},"content":{"rendered":"\n<p>In one of the biggest breaches in DeFi history, hackers stole more than $600 million of tokens \u2014 Ethereum and USDC \u2014 from the Ronin blockchain associated with the popular game, <em>Axie Infinity<\/em>.<\/p>\n<p>Both entities are part of the burgeoning Web3 ecosystem, which is defined by elements of decentralization and digital currency. And the fact that they could be broken into highlights the need for focus on security in the glitzy world of Web3.<\/p>\n<p>We\u2019ll take a look at details of the hack, and how the company\u2019s mitigating it. But first, a brief introduction about the game and the Ronin blockchain.<\/p>\n<h2>What the heck is <em>Axie Infinity<\/em>?<\/h2>\n<p><em>Axie Infinity<\/em> is a play-to-earn game where players have to mint and collect NFT-based characters that aren\u2019t unlike animated monsters, a la Pokemon. They can earn in-game tokens through breeding, battling, and building their army with these monsters called Axies.<\/p>\n<p>Sky Mavis, the Vietnamese company that runs the game, raised<a href=\"https:\/\/www.ledgerinsights.com\/play-to-earn-nft-game-axie-infinity-raises-150-million\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\"> $152 million<\/a> \u2014 bringing its valuation to $3 billion \u2014 last year from investors like a16z, FTX cryptocurrency exchange, and Samsung Next.<\/p>\n<figure class=\"post-image post-mediaBleed aligncenter\"><img decoding=\"async\" loading=\"lazy\" class=\"size-featured_img wp-image-1383513 js-lazy\" src=\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land-796x398.png\" alt=\"Axie Infinity has some cute characters.\" width=\"796\" height=\"398\" sizes=\"(max-width: 796px) 100vw, 796px\" data-srcset=\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land-796x398.png 796w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land-280x140.png 280w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land-270x135.png 270w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land-540x270.png 540w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land-1536x768.png 1536w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land-1592x796.png 1592w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land.png 1640w\"><figcaption><a href=\"https:\/\/thenextweb.com\/news\/axie-infinity-ronin-blockchain-hack-defi-analysis#\" data-url=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Feditorial.thenextweb.com%2Fhardfork%2F2022%2F03%2F30%2Faxie-infinity-ronin-blockchain-hack-defi-analysis%2F&amp;via=thenextweb&amp;related=thenextweb&amp;text=Check out this picture on: Axie Infinity has some cute characters.\" data-title=\"Share Axie Infinity has some cute characters. on Twitter\" data-width=\"685\" data-height=\"500\" class=\"post-image-share popitup\" title=\"Share Axie Infinity has some cute characters. on Twitter\"><i class=\"icon icon--inline icon--twitter--dark\"><\/i><\/a>Axie Infinity has some cute characters.<\/figcaption><noscript><img decoding=\"async\" loading=\"lazy\" class=\"size-featured_img wp-image-1383513\" src=\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land-796x398.png\" alt=\"Axie Infinity has some cute characters.\" width=\"796\" height=\"398\" srcset=\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land-796x398.png 796w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land-280x140.png 280w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land-270x135.png 270w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land-540x270.png 540w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land-1536x768.png 1536w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land-1592x796.png 1592w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/land.png 1640w\"><\/noscript><\/figure>\n<p>The game is extremely popular in the Philippines, where <a href=\"https:\/\/restofworld.org\/2021\/axie-infinity\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">players have been reported to make a living out of it<\/a>, while wealthier followers of the game invest in said players.<\/p>\n<p>In February, <a href=\"https:\/\/bitcoinke.io\/2022\/02\/axie-infinity-surpasses-4-billion-in-nft-sales\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">it crossed the mark of $4 billion<\/a> in lifetime NFT sales.<\/p>\n<figure>\n<p> <iframe srcdoc=\"\n\n<style>*{padding:0;margin:0;overflow:hidden}html,body{background:#000;height:100%}img{position:absolute;top:0;left:0;width:100%;height:100%;object-fit:cover;transition:opacity .1s cubic-bezier(0.4,0,1,1)}a:hover img+img{opacity:1!important}<\/style>\n<p><a href='https:\/\/www.youtube.com\/embed\/oMa8cc6YxSI?feature=oembed&amp;autoplay=1&amp;mute=1&amp;modestbranding=1&amp;iv_load_policy=3&amp;theme=light&amp;playsinline=1'><img src='https:\/\/img.youtube.com\/vi\/oMa8cc6YxSI\/hqdefault.jpg'><img src='https:\/\/cdn0.tnwcdn.com\/wp-content\/themes\/cyberdelia\/assets\/img\/ytplaybtn.png' style='top: 50%;left:50%;width:68px;height:48px;transform:translate3d(-50%,-50%,0)'><img src='https:\/\/cdn0.tnwcdn.com\/wp-content\/themes\/cyberdelia\/assets\/img\/ytplaybtn-hover.png' style='top: 50%;left:50%;width:68px;height:48px;opacity:0;transform:translate3d(-50%,-50%,0)'><\/a>&#8221; height=&#8221;240&#8243; width=&#8221;320&#8243; allow=&#8221;accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture&#8221; allowfullscreen frameborder=&#8221;0&#8243;>[embedded content]<\/iframe> <\/p>\n<\/figure>\n<p> <!--resp-video-container--> <\/p>\n<h2>And what is Ronin?<\/h2>\n<p>Ronin is a side-chain (a blockchain compatible with Ethereum) that allows for faster and cheaper transactions than the primary blockchain for Axie Infinity players.<\/p>\n<p>The game\u2019s transactions are based on Ethereum. But it\u2019s very costly to do multiple transactions per day because of <a href=\"https:\/\/www.fool.com\/investing\/2021\/12\/23\/could-this-help-solve-ethereum-high-gas-fees\/#:~:text=Ethereum%20(%20ETH%201.82%25%20)%20is,that%20needs%20to%20be%20solved.\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">the high fees<\/a> involved with ETH.<\/p>\n<p>To solve that problem, Axie Infinity developers released Ronin in February 2021 \u2014 a chain based on Ethereum that allowed 100 free transactions per day.<\/p>\n<p>This led to tremendous growth, and <a href=\"https:\/\/blockworks.co\/axie-infinity-program-lead-2022-will-be-all-about-gameplay\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">the game\u2019s community grew to 2.9 million users<\/a> by end-2021.<\/p>\n<h2>What about that breach?<\/h2>\n<p>According to Ronin\u2019s <a href=\"https:\/\/roninblockchain.substack.com\/p\/community-alert-ronin-validators?s=w\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">official Substack page<\/a>, attackers were able to siphon off 173,600 ether and 25.5 million&nbsp;USDC \u2014 worth more than $625 million at the current market value \u2014 across two transactions.<\/p>\n<p>In order to complete a transaction on the Ronin blockchain, you need approval from validator nodes. The Ronin chain has nine validators in total, and you need a signature from at least five of them for a transaction to go through.<\/p>\n<p>Attackers used an exploit to gain control over four Sky Mavis validators and one Axie DAO validator node, and perform two transactions.<\/p>\n<p>The attack took place on March 23, but the network got to know about it only six days later on Tuesday, when a user tried and failed to withdraw 5,000 ETH from the network.<\/p>\n<h2>Impact and next steps<\/h2>\n<p>Currently, the Ronin bridge is frozen for transactions, and it\u2019ll open at \u201ca later date\u201d once the company has ensured that no more funds could be drained. The firm said, \u201cAll of the AXS, RON, and SLP [in-game tokens] on Ronin are safe right now.\u201d<\/p>\n<p>Sky Mavis is also working with forensic cryptographers, authorities, and security agencies like Chainalysis to recover funds. It\u2019s trying to make sure that no user money is lost in the process.<\/p>\n<figure class=\"post-image post-mediaBleed aligncenter\"><img decoding=\"async\" loading=\"lazy\" class=\"size-featured_img wp-image-1383520 js-lazy\" src=\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM-796x631.png\" alt=\"The price of the Ronin token has plunged by over 18% in last 24 hours\" width=\"796\" height=\"631\" sizes=\"(max-width: 796px) 100vw, 796px\" data-srcset=\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM-796x631.png 796w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM-265x210.png 265w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM-170x135.png 170w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM-340x270.png 340w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM-1536x1218.png 1536w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM-1592x1263.png 1592w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM.png 1712w\"><figcaption><a href=\"https:\/\/thenextweb.com\/news\/axie-infinity-ronin-blockchain-hack-defi-analysis#\" data-url=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Feditorial.thenextweb.com%2Fhardfork%2F2022%2F03%2F30%2Faxie-infinity-ronin-blockchain-hack-defi-analysis%2F&amp;via=thenextweb&amp;related=thenextweb&amp;text=Check out this picture on: The price of the Ronin token has plunged by over 18% in the last 24 hours\" data-title=\"Share The price of the Ronin token has plunged by over 18% in the last 24 hours on Twitter\" data-width=\"685\" data-height=\"500\" class=\"post-image-share popitup\" title=\"Share The price of the Ronin token has plunged by over 18% in the last 24 hours on Twitter\"><i class=\"icon icon--inline icon--twitter--dark\"><\/i><\/a>The price of the Ronin token has plunged by over 18% in the last 24 hours<\/figcaption><noscript><img decoding=\"async\" loading=\"lazy\" class=\"size-featured_img wp-image-1383520\" src=\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM-796x631.png\" alt=\"The price of the Ronin token has plunged by over 18% in last 24 hours\" width=\"796\" height=\"631\" srcset=\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM-796x631.png 796w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM-265x210.png 265w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM-170x135.png 170w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM-340x270.png 340w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM-1536x1218.png 1536w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM-1592x1263.png 1592w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2022\/03\/Screenshot-2022-03-30-at-4.01.57-PM.png 1712w\"><\/noscript><\/figure>\n<p>To bolster its security to prevent hacks like this, the company has increased the mandatory threshold for transactions from five validator nodes to eight validator nodes.<\/p>\n<p>\u201cWe know trust needs to be earned and are using every resource at our disposal to deploy the most sophisticated security measures and processes to prevent future attacks,\u201d it said.<\/p>\n<p>This hack outlines the requirement to increase security for cryptocurrency-based projects.<\/p>\n<p>Many of these projects pride themselves on the fact that they are able to become platforms for people to have fun, spend their valuable time online, and earn money. But if that moolah is not kept safe, no one\u2019s going to stick around \u2014 and they might lose faith in play-to-earn gaming altogether.<\/p>\n<p> <a href=\"https:\/\/thenextweb.com\/news\/axie-infinity-ronin-blockchain-hack-defi-analysis\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In one of the biggest breaches in DeFi history, hackers stole more than $600 million of tokens \u2014 Ethereum and USDC \u2014 from the Ronin blockchain associated with the popular game, Axie&#8230;<\/p>\n","protected":false},"author":1,"featured_media":10771,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/posts\/10770"}],"collection":[{"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=10770"}],"version-history":[{"count":0,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/posts\/10770\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/media\/10771"}],"wp:attachment":[{"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=10770"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=10770"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=10770"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}