An Aurory Gaming Platform Vulnerability Causes the Deletion of AURY Tokens Valued at $830,000

Decrypt reports that an exploit on the Aurory gaming platform occurred on Sunday evening, enabling an assailant to withdraw an estimated 600,000 AURY tokens, which were valued at approximately $830,000 at the time. In response to the incident, the developers of the battler game resembling Pokémon disabled the SyncSpace blockchain bridge that linked the game to the Ethereum scaling network Arbitrum and Solana. Jonathan Campeau, executive producer of Aurory, disclosed that the organization is currently developing a worldwide patch for its infrastructure services in order to rectify the race condition attack that compromised their off-chain marketplace.

The vulnerability caused AURY-USDC liquidity on the decentralized exchange Camelot to decline by 80%, and the price of AURY has decreased by approximately 17% since early Sunday. At present, the pilfered AURY tokens are valued at around $690,000. On Twitter, the Aurory team provided further clarification that while the exploit did enable the assailant to withdraw funds from a developer team wallet and transfer the tokens to Arbitrum, neither user funds nor NFTs were compromised. A prior audit of the platform by the cybersecurity firm Ottersec failed to identify the vulnerability.

The vulnerability could have been identified and prevented, according to David Schwed, COO of cybersecurity firm Halborn, who told Decrypt that a third-party audit is insufficient to maintain high levels of platform security. The Aurory team intends to restore connectivity to its bridge within the following days, subsequent to the patching of the exploit. In addition to a multi-chain approach to blockchain gaming and the forthcoming release of Seekers of Tokane on the Epic Games Store, the gaming platform continues to develop its ecosystem.