On May 28th, Gala announced the unauthorized issuance of 5 billion GALA tokens and published a post-event report. It stated that all internal processes have been rectified, including the removal of unauthorized users. The hacker has returned the ETH obtained by selling GALA, which has been used to repurchase and destroy tokens. The 5 billion GALA tokens will be destroyed. The attacker's contract and wallet have been immediately blacklisted, and the Ethereum contract is secured through a geographically dispersed multi-signature contract.
Currently, Gala has identified malicious actors through the use of patterns in other activities and within the network. These patterns indicate previous association with minor vulnerabilities, suggesting the presence of privilege access abuse rather than external software vulnerabilities. The case has been submitted to the U.S. Department of Justice and the Federal Bureau of Investigation for further investigation. Meanwhile, Gala is conducting an internal review of security protocols and contract access permissions, strengthening measures such as access control and key management practices.