GalaChain wallets reportedly drained using 74 signatures from failed transactions
CryptoSlate reports that an attacker reused signatures, some 55 days old, to drain about 2 billion GALA and other tokens from nine wallets.
TLDR
An attacker reused 74 signatures from failed transactions to drain nine GalaChain wallets, CryptoSlate reports. Some signatures were 55 days old; the tokens taken included about 2 billion GALA. The outlet says the flaw shows how signatures that remain public and replayable after failed transactions can let attackers turn old user approvals into fresh withdrawals.
Combined views
1.5K
1 Source, first seen ago
3 likes