{"id":85650,"date":"2023-10-12T15:27:08","date_gmt":"2023-10-12T12:27:08","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=85650"},"modified":"2025-09-13T00:36:50","modified_gmt":"2025-09-12T21:36:50","slug":"hacker-returns-90-of-funds-stolen-in-stars-arena-hack","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/hacker-returns-90-of-funds-stolen-in-stars-arena-hack\/","title":{"rendered":"Hacker Returns 90% of Funds Stolen in Stars Arena Hack"},"content":{"rendered":"<p><a href=\"https:\/\/hub.forklog.com\/chto-takoe-socialfi-i-dlya-chego-eto-nuzhno\/\">SocialFi<\/a>-platform Stars Arena, based on <a href=\"https:\/\/forklog.com\/en\/news\/what-is-avalanche-avax\">Avalanche<\/a>, has recovered approximately 90% of assets lost in the exploit. The return of funds came as a result of negotiations with the hacker.<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\">UPDATE: <\/p>\n<p>We have recovered approximately 90% of the lost funds.<\/p>\n<p>We reached an agreement with the individual responsible for the recent security breach.<\/p>\n<p>The funds have been returned in exchange for a 10% bounty fee + 1000 AVAX that was lost in a bridge.<\/p>\n<p>Total funds lost:\u2026<\/p>\n<p>\u2014 Stars Arena (@starsarenacom) <a href=\"https:\/\/twitter.com\/starsarenacom\/status\/1712192197443883453?ref_src=twsrc%5Etfw\">October 11, 2023<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>On October 7, the <a href=\"https:\/\/forklog.com\/en\/news\/friend-tech-a-new-era-for-social-networks-or-a-one-day-wonder\">Friend.Tech<\/a>-inspired project <a href=\"https:\/\/forklog.com\/en\/news\/friend-tech-clone-on-avalanche-hacked-for-3-million\">lost 266 103 AVAX<\/a> (~$3 million at the time of the attack) due to a &#8220;serious security flaw&#8221; in the smart contracts. As a result of the incident, the total value of assets locked on Stars Arena fell to zero.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>&#8220;We have reached an agreement with the person responsible for the recent security breach,&#8221; the team said.<\/p>\n<\/blockquote>\n<p>Under the agreement, the restitution fee amounted to 27 610 AVAX \u2014 10% of the total sum plus 1,000 AVAX lost in the <a href=\"https:\/\/forklog.com\/en\/news\/what-are-cross-chain-bridges\">cross-chain bridge<\/a>.\u00a0<\/p>\n<p>The hacker transferred 239 493 AVAX to the platform in two transactions.<\/p>\n<p>The Stars Arena developers also said that after the incident they wrote an entirely new smart contract. The original code is now undergoing an audit by Paladin Blockchain Security.<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\">UPDATE:<\/p>\n<p>\u2022 Our technical team led by <a href=\"https:\/\/twitter.com\/0xlocrian?ref_src=twsrc%5Etfw\">@0xlocrian<\/a> has written an entirely new smart contract<\/p>\n<p>\u2022 We are finalizing a full contract audit with <a href=\"https:\/\/twitter.com\/0xPaladinSec?ref_src=twsrc%5Etfw\">@0xPaladinSec<\/a> <\/p>\n<p>\u2022 The contract will become open-source after the audit is concluded<\/p>\n<p>\u2022 We will have a paused verified contract BEFORE\u2026<\/p>\n<p>\u2014 Stars Arena (@starsarenacom) <a href=\"https:\/\/twitter.com\/starsarenacom\/status\/1712100124543918551?ref_src=twsrc%5Etfw\">October 11, 2023<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>The team pledged to cover the shortfall before the platform&#8217;s restart.<\/p>\n<p>In late September, the Avalanche-based Stars Arena app, launched as a fork of Friend.Tech, <a href=\"https:\/\/forklog.com\/en\/news\/friend-tech-clone-boosts-activity-on-the-avalanche-network\">caused a sharp uptick in activity<\/a> on the network. The number of transactions in the ecosystem jumped from 790,000 to 1.2 million in under a week.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Avalanche-based SocialFi platform Stars Arena has recovered approximately 90% of the assets lost in the exploit. The restitution followed negotiations with the hacker.<\/p>\n","protected":false},"author":1,"featured_media":85651,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[44,1195],"class_list":["post-85650","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-cybercrime","tag-white-hat-hackers"],"aioseo_notices":[],"amp_enabled":true,"views":"24","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/85650","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=85650"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/85650\/revisions"}],"predecessor-version":[{"id":85652,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/85650\/revisions\/85652"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/85651"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=85650"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=85650"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=85650"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}