Discord announcement as of 24 March 2026, Tuesday, 09:06 PM
Dear Kings, Queens, Landlords, and @everyone
Security Breach : Incident Report
Yesterday, on March 23, 2026, at approximately 05:53 AM UTC, one of our Lockup Contract Owner Keys was compromised.
Our team identified the breach earlier today and has since initiated measures to contain and assess the situation. We regret the impact of this incident and are addressing it with full transparency.
Overview
A malicious actor gained unauthorized access to the private key of the Lockup Contract’s owner account. Using this access, the attacker claimed unlocked LOKA and A2Z tokens that remained unclaimed in the contract.
These funds were subsequently transferred to the attacker’s wallet and liquidated on decentralized exchanges (DEXs).
In addition, the attacker modified the ownership of the Gaming Issuance pool (GI pool, hereafter), granting them potential access to remaining unlocks (up to 2%) of GI contract.
Detailed on-chain history of the unauthorized fund flow can be tracked via the original owner address below:
https://etherscan.io/address/0xa05c03cb7f9ae66b4cb9cc499a1f5300d4bdaaf1#tokentxns
Containment & Actions
Upon discovery, our team initiated emergency protocols to secure the remaining infrastructure and preserve evidence:
- Ownership Recovery: We have recovered ownership of lock-up contracts and migrated them to a Secure Safe Wallet to prevent any further attacks, with the GI pool under separate remediation. To address any potential shortfall in the GI pool, we will ensure uninterrupted in-game reward distribution.
- Forensics & Evidence: We are going through a forensic investigation. All on-chain evidence and logs have been collected to track the movement of the stolen assets and identify the source of the breach.
We understand this is a difficult time for our community. Our team is moving forward with the investigation with full focus and urgency, and we will continue to share updates as we assess the full scope and impact.
We appreciate your patience as we work through this situation.
Compromised tokens:
$A2Z: 1,138,868,131
$LOKA: 12,185,594.18
Locked Game Issuance: 210,000,000 $A2Z
Lockup Contracts:
Game Issuance compromised
0x4135f299888496663c1f238e7fa13a26bbc4cf02
Land Issuance
0xb9d2f1d44782ab00031dd71e507c9923f73ffc0f
Ecosystem
0x9018aa928763e75ad9023348bff60b8e17600915
Reserve
0x6fce8abbcfe0c26b86cd7327c304b17e9d89f9bd
Staking Re-lock
0x9e64bc29e9d8b5b31ec9aa3b6fe778afc8051d71
Attacker’s Wallet Address:
0xbc1ac1c4B0fDD74C915d607ee129130Ab1EBD619
Comments
Article is closed for comments.