Galxe Website Compromised, Balancer Hackers Likely Responsible

Galxe, a Web3 credential project, instructed users not to interact with the platform following a security breach on its website.

Meanwhile, on-chain sleuth ZachXBT says the hackers are likely the same as the rogue actors that recently attacked Balancer’s front end.

• Galxe reported the security incident via its official X handle on October 6, asking users not to visit the compromised site until the issue was resolved.

🚨Update: We’ve detected a security breach affecting the DNS record for “ through our Dynadot account. Please refrain from visiting the site from all channels while we are resolving the issue. Your safety remains our utmost priority.

— Galxe (@Galxe) October 6, 2023

• The project previously informed users that its website was down and advised against not connecting their wallets, or if connected, to immediately disconnect and also refrain from signing any transaction.
• While the platform does not yet state the level of financial damage, Galxe’s warning might be a little late, as several users already reported stolen funds.
• According to on-chain sleuth ZachXBT, the hacker has started moving funds to an address while also stating that they might be the same ones who attacked Balancer’s front end.

🚨 Attention Community! At the moment, the Galxe website is down and we’re working on repairing the issue. Please do not connect your wallet to Galxe for the timebeing.

The issue will be resolved shortly, thank you for your patience!

— Galxe (@Galxe) October 6, 2023

• As previously reported by CryptoPotato, Balancer asked users not to interact with its interface, as it was under attack. Shortly after the warning, the hacker stole about $238,000. The Ethereum-based decentralized protocol later revealed that the incident was a result of a social engineering attack.
• Galxe is a Web3 protocol used to run interactive campaigns for crypto giveaways and airdrops. It offers credential services.