Galactic Monster Quest Hacked -

The breach was not a brute-force attack or a simple SQL injection. Instead, the perpetrators exploited a zero-day vulnerability in the game’s cross-chain bridge—the technology that allowed players to trade GMQ’s native “Nebula Tokens” and NFT-based monsters between Ethereum, Solana, and Polygon networks.

These Voidborn monsters were then instantly liquidated on secondary marketplaces like OpenSea and Magic Eden, netting the perpetrators an estimated $14.2 million in cryptocurrency before anyone hit the panic button. Galactic Monster Quest Hacked

According to Chainalysis data released three days after the attack, the hackers used a re-entrancy loophole in the game’s smart contract for “Cosmic Fusion”—a feature that allowed players to merge three common monsters into one rare hybrid. By repeatedly calling the fusion function before the contract could update the player’s balance, the attackers minted over 50,000 ultra-rare “Voidborn” monsters in under 45 minutes. The breach was not a brute-force attack or

To date, no official suspect has been named. In disaster, there is often a strange kind of beauty. For every player who raged against StellarForge, dozens more have rallied to support each other. According to Chainalysis data released three days after

In the chaos of the attack, one of the perpetrators accidentally sent 1.5 Ether (about $2,400) to a wallet linked to a known ransomware group from Eastern Europe. This connection has led the FBI’s Cyber Division to open a formal investigation, working alongside Europol and Interpol.

So far, the trail leads through Tornado Cash—a cryptocurrency mixer often used to obfuscate transactions—and then onward to several decentralized exchanges. However, one slip-up by the hackers has given investigators a glimmer of hope.

That all came crashing down last week.