Quick Take
- Moonveil reported unauthorized transactions around 2:00 AM UTC on Dec. 19 tied to a node and staking contract creator wallet.
- The studio put the total moved at 56.48M MORE across two attacker wallets, with 14.9M sold on DEXs and 7.39M sent to MEXC.
- Moonveil’s last update on Dec. 20 described 34.18M MORE as permanently locked in a non withdrawable ERC20 contract address.
Moonveil, a Web3 gaming studio behind the MORE token, disclosed a security incident on December 19 after detecting suspicious transactions originating from a node and staking contract creator wallet address. The team reported that the deployer wallet private key was compromised, and that the compromised address retained permissions across several contracts, including staking, node rewards, and an airdrop related contract.
Across its December 19 and December 20 updates, Moonveil reported a total of 56.48 million MORE transferred across two wallet addresses controlled by the attacker. Moonveil listed 14.9 million MORE sold through decentralized exchanges, 7.39 million MORE transferred to MEXC and frozen after the team contacted the exchange, and 34.18 million MORE unexpectedly sent back to Moonveil’s MORE ERC20 contract address.
Based on the token amounts Moonveil reported, the incident totals work out to about $146,848 worth of MORE moved overall. The breakdown equals about $38,740 for the 14.9 million MORE sold on DEXs, about $19,214 for the 7.39 million MORE transferred to MEXC, and about $88,868 for the 34.18 million MORE sent back to the MORE ERC20 contract address.
Moonveil reported removing liquidity from DEX pools, canceling active CEX orders, contacting Binance for monitoring support, and revoking permissions tied to the compromised deployer address. In its December 20 post, Moonveil stated the MORE ERC20 contract address is non withdrawable, meaning the 34.18 million MORE sent back are permanently frozen and removed from circulation. As of December 22, Moonveil has not posted additional updates beyond that statement, based on the posts provided.
Moonveil describes itself as founded in 2022 by veterans with experience at Riot Games and Tencent, and has been described in separate materials as receiving a $5 million strategic investment from Unicorn Verse tied to its Web3 gaming ecosystem and the MORE token.
