Sky Mavis’ Ronin Network Bridge Exploited for Over $625M

Services have been halted on the Ronin Bridge and Katana DEX


Blockworks exclusive art by axel Rangel


key takeaways

  • Exploiters used hacked private keys to forge fake withdrawals on March 23
  • “We are working with law enforcement officials, forensic cryptographers, and our investors to make sure that all funds are recovered or reimbursed,” Ronin Network said in a statement

Ronin Network, an Ethereum-linked sidechain used for blockchain game Axie Infinity, was breached. Hackers exploited the network for roughly $625 million, or 173,600 ether and 25.5 million USDC, according to a Tuesday statement.

Exploiters, per the network’s post, used hacked private keys to forge withdrawals on March 23. The breach, however, wasn’t discovered until Tuesday, when a user was unable to withdraw 5,000 ETH.

Ethereum and USDC deposits on Ronin have been drained from its bridge contract. Users, as of now, are unable to withdraw or deposit funds. The Ronin Bridge and Katana DEX, as a result, have been halted.

“Sky Mavis’ Ronin chain currently consists of 9 validator nodes. In order to recognize a Deposit event or a Withdrawal event, five out of the nine validator signatures are needed,” the blogpost said. “The attacker managed to get control over Sky Mavis’s four Ronin Validators and a third-party validator run by Axie DAO.”

Loading Tweet..

Sky Mavis, the creator of Axie Infinity, said it is “committed to ensuring that all of the drained funds are recovered or reimbursed.”

“We are working with law enforcement officials, forensic cryptographers, and our investors to make sure that all funds are recovered or reimbursed,” the network said in a tweet. 

Most of the stolen ETH remains in the attacker’s wallet, but 6,250 ETH (about $21 million) has been transferred out, including hundreds of ETH sent to the FTX Exchange.

All $25.5 million in USDC has been transferred out to various wallets and DeFi protocols, according to Etherscan.

RON, the native token of the Ronin Network, is down 23% on the news, according to CoinMarketCap.

This is a developing story and may be updated as new information becomes available.

Don’t miss the next big story – join our free daily newsletter.


Upcoming Events

Hilton Metropole | 225 Edgware Rd, London

MON - WED, MARCH 18 - 20, 2024

Crypto’s premier institutional conference returns to London in March 2024. The DAS: London Experience:  Attend expert-led panel discussions and fireside chats  Hear the latest developments regarding the crypto and digital asset regulatory environment directly from policymakers and experts   Grow your network […]

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Frax report cover.jpg


Frax saw continued development in its frxETH liquid staking derivative and Fraxlend money market throughout 2023. Frax V3 introduces an RWA strategy to drive utility to the protocol's cornerstone product, the FRAX stablecoin.


MicroStrategy discloses the purchase of 16,000 bitcoin throughout November


Digital asset firms face potential new regulatory landscape under Treasury’s proposed authority expansion


Uniswap Labs will be providing trading APIs to Talos investors through Fireblocks


DYDX supply will climb by up to 80% after the Friday unlock, but a couple factors make a massive sell-off appear unlikely


Switzerland-based Pando Asset, which has crypto products trading on the SIX Swiss Exchange, now looks to the US


Binance does not hold the required licenses to advertise and serve customers in the Philippines, the country’s securities regulator said