Verify a decision

{"actor":"system:backfill","investigation_id":"90804b6a-5edb-4b8e-86e6-1fe06e92c10a","kind":"publish","page_slug":"playdapp","published_at":"2026-05-30T12:59:46.504Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"PlayDapp","sections":[{"content":"","heading":"Platform Background","severity":"low","sources":[{"credibility":2,"name":"PlayDapp — IQ.wiki","type":"research","url":"https://iq.wiki/wiki/playdapp"},{"credibility":2,"name":"PlayDapp and ITSB GamePot press release — PR Newswire","type":"official","url":"https://www.prnewswire.com/news-releases/playdapp-and-itsbs-gamepot-join-forces-to-introduce-blockchain-games-to-north-america-301422926.html"},{"credibility":3,"name":"PlayDapp Price Reaches $0.22 on Exchanges — Enterprise Leader","type":"news_article","url":"https://theenterpriseleader.com/2024/01/01/playdapp-price-reaches-0-22-on-exchanges-pla.html"}]},{"content":"","heading":"The February 2024 Private Key Compromise","severity":"critical","sources":[{"credibility":1,"name":"PlayDapp Post-Mortem on the Hacking Incident — PlayDapp Team (Medium)","type":"official","url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"credibility":2,"name":"Hackers Mint 1.79 Billion Crypto Tokens from PlayDapp Gaming Platform — BleepingComputer","type":"news_article","url":"https://www.bleepingcomputer.com/news/security/hackers-mint-179-billion-crypto-tokens-from-playdapp-gaming-platform/"},{"credibility":2,"name":"Crypto Gaming Platform PlayDapp Suffers $290 Million Breach — Elliptic","type":"research","url":"https://www.elliptic.co/blog/crypto-gaming-platform-playdapp-suffers-290-million-breach"},{"credibility":2,"name":"Explained: The PlayDapp Hack (February 2024) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-playdapp-hack-february-2024"}]},{"content":"","heading":"Second Minting Event and Full Scope of Losses","severity":"critical","sources":[{"credibility":1,"name":"PlayDapp Post-Mortem on the Hacking Incident — PlayDapp Team (Medium)","type":"official","url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"credibility":2,"name":"PlayDapp Exploit Post-Mortem of a $290M Heist — Nefture Security (Medium)","type":"research","url":"https://medium.com/nefture/playdapp-exploit-post-mortem-of-a-290m-heist-f6803349cde8"},{"credibility":2,"name":"PlayDapp Exploit Continues 4th Day, Losses Reaching $290M — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/playdapp-exploit-continues-4th-day-losses-reaching-290-million"},{"credibility":1,"name":"Crypto Gaming Platform PlayDapp Loses $290 Million — The Block","type":"news_article","url":"https://www.theblock.co/post/277334/crypto-gaming-platform-playdapp-loses-290-million-worth-of-tokens-in-two-exploits-elliptic"}]},{"content":"","heading":"Alleged Lazarus Group Attribution","severity":"high","sources":[{"credibility":2,"name":"Hackers Mint 1.79 Billion Crypto Tokens from PlayDapp — BleepingComputer","type":"news_article","url":"https://www.bleepingcomputer.com/news/security/hackers-mint-179-billion-crypto-tokens-from-playdapp-gaming-platform/"},{"credibility":2,"name":"How the Lazarus Group is Stepping Up Crypto Hacks — Elliptic","type":"research","url":"https://www.elliptic.co/blog/how-the-lazarus-group-is-stepping-up-crypto-hacks-and-changing-its-tactics"},{"credibility":2,"name":"Crypto Gaming Platform PlayDapp Suffers $290 Million Breach — Elliptic","type":"research","url":"https://www.elliptic.co/blog/crypto-gaming-platform-playdapp-suffers-290-million-breach"}]},{"content":"","heading":"Platform Response and Token Migration","severity":"high","sources":[{"credibility":1,"name":"PlayDapp Post-Mortem on the Hacking Incident — PlayDapp Team (Medium)","type":"official","url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"credibility":1,"name":"PLA to PDA Token Migration Tutorial and FAQ — PlayDapp Team (Medium)","type":"official","url":"https://medium.com/playdappgames/pla-to-pda-token-migration-tutorial-and-faq-a539ded1b42f"},{"credibility":2,"name":"PlayDapp Reveals Migration Plan after Secondary Hack — Metaverse Post","type":"news_article","url":"https://mpost.io/playdapp-reveals-migration-plan-after-secondary-hack-attack-led-to-issuance-of-1-59b-pla-tokens/"},{"credibility":2,"name":"Crypto.com Supports the PlayDapp Token Migration","type":"news_article","url":"https://crypto.com/us/product-news/crypto-com-supports-the-playdapp-token-migration"}]},{"content":"","heading":"Smart Contract Security Analysis","severity":"critical","sources":[{"credibility":2,"name":"Explained: The PlayDapp Hack (February 2024) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-playdapp-hack-february-2024"},{"credibility":2,"name":"PlayDapp Exploit Post-Mortem of a $290M Heist — Nefture Security (Medium)","type":"research","url":"https://medium.com/nefture/playdapp-exploit-post-mortem-of-a-290m-heist-f6803349cde8"},{"credibility":2,"name":"Hacker Manipulates PlayDapp's Minting Process, PLA Plummets — Crypto.news","type":"news_article","url":"https://crypto.news/hacker-manipulates-playdapp-minting-pla-plummets/"}]}],"sources_used":[{"credibility":1,"name":"PlayDapp Post-Mortem on the Hacking Incident — PlayDapp Team (Medium)","type":"official","url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"credibility":2,"name":"Crypto Gaming Platform PlayDapp Suffers $290 Million Breach — Elliptic","type":"research","url":"https://www.elliptic.co/blog/crypto-gaming-platform-playdapp-suffers-290-million-breach"},{"credibility":2,"name":"Hackers Mint 1.79 Billion Crypto Tokens from PlayDapp Gaming Platform — BleepingComputer","type":"news_article","url":"https://www.bleepingcomputer.com/news/security/hackers-mint-179-billion-crypto-tokens-from-playdapp-gaming-platform/"},{"credibility":2,"name":"Explained: The PlayDapp Hack (February 2024) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-playdapp-hack-february-2024"},{"credibility":2,"name":"PlayDapp Exploit Post-Mortem of a $290M Heist — Nefture Security (Medium)","type":"research","url":"https://medium.com/nefture/playdapp-exploit-post-mortem-of-a-290m-heist-f6803349cde8"},{"credibility":2,"name":"PlayDapp Exploit Continues 4th Day, Losses Reaching $290M — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/playdapp-exploit-continues-4th-day-losses-reaching-290-million"},{"credibility":1,"name":"Crypto Gaming Platform PlayDapp Loses $290 Million — The Block","type":"news_article","url":"https://www.theblock.co/post/277334/crypto-gaming-platform-playdapp-loses-290-million-worth-of-tokens-in-two-exploits-elliptic"},{"credibility":1,"name":"PLA to PDA Token Migration Tutorial and FAQ — PlayDapp Team (Medium)","type":"official","url":"https://medium.com/playdappgames/pla-to-pda-token-migration-tutorial-and-faq-a539ded1b42f"},{"credibility":2,"name":"PlayDapp Reveals Migration Plan after Secondary Hack — Metaverse Post","type":"news_article","url":"https://mpost.io/playdapp-reveals-migration-plan-after-secondary-hack-attack-led-to-issuance-of-1-59b-pla-tokens/"},{"credibility":2,"name":"How the Lazarus Group is Stepping Up Crypto Hacks — Elliptic","type":"research","url":"https://www.elliptic.co/blog/how-the-lazarus-group-is-stepping-up-crypto-hacks-and-changing-its-tactics"},{"credibility":2,"name":"PlayDapp — IQ.wiki","type":"research","url":"https://iq.wiki/wiki/playdapp"},{"credibility":2,"name":"Hacker Manipulates PlayDapp's Minting Process, PLA Plummets — Crypto.news","type":"news_article","url":"https://crypto.news/hacker-manipulates-playdapp-minting-pla-plummets/"},{"credibility":2,"name":"Crypto.com Supports the PlayDapp Token Migration","type":"news_article","url":"https://crypto.com/us/product-news/crypto-com-supports-the-playdapp-token-migration"},{"credibility":1,"name":"Updates on PLA to PDA Token Migration — PlayDapp Team (Medium)","type":"official","url":"https://medium.com/playdappgames/updates-on-pla-to-pda-token-migration-8fd3ad213069"},{"credibility":2,"name":"PlayDapp Breach 8th Largest Hack in Crypto History at $290M — Crypto.news","type":"news_article","url":"https://crypto.news/playdapp-breach-hack-crypto-290-million/"}],"summary":"PlayDapp is a South Korean blockchain gaming platform and NFT marketplace founded in 2017 and operating on Ethereum and Polygon. In February 2024, an attacker who had obtained PlayDapp's contract deployer private key via a phishing email added themselves as an authorized minter and minted 1.79 billion PLA tokens across two events, representing a nominal loss of approximately $290 million. The platform subsequently suspended the PLA smart contract and executed a 1:1 migration to a new token (PDA) to remediate the illegitimate token supply.","timeline":[{"date":"2017-01-01","event":"PlayDapp (SuperTree) founded in Seoul, South Korea.","source":"IQ.wiki — PlayDapp","source_url":"https://iq.wiki/wiki/playdapp"},{"date":"2019-01-01","event":"CryptoDozer and DozerBird, PlayDapp's first blockchain games, launch on Ethereum. CryptoDozer surpasses CryptoKitties in daily transaction volume.","source":"IQ.wiki — PlayDapp","source_url":"https://iq.wiki/wiki/playdapp"},{"date":"2024-01-16","event":"A PlayDapp team member receives a domain-spoofed phishing email mimicking a trusted exchange partner. Opening the attachment installs a malicious remote-access tool, leading to exfiltration of the contract deployer private key.","source":"PlayDapp Post-Mortem — PlayDapp Team (Medium)","source_url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"date":"2024-02-09","event":"Attacker uses the stolen deployer private key to add wallet 0xD151050d43c28690766f50Ce9ea8686c5D243a40 as an authorized minter. 200 million PLA tokens (~$36.5 million) are minted and dispersal to exchanges begins.","source":"PlayDapp Post-Mortem — PlayDapp Team (Medium)","source_url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"date":"2024-02-10","event":"PlayDapp detects the unauthorized minting. Platform alerts partner exchanges and requests suspension of PLA deposits and withdrawals.","source":"Explained: The PlayDapp Hack — Halborn","source_url":"https://www.halborn.com/blog/post/explained-the-playdapp-hack-february-2024"},{"date":"2024-02-11","event":"PlayDapp broadcasts an on-chain message to the attacker offering a $1 million white-hat bounty in exchange for return of contract control and all stolen assets, with a deadline of February 13 at 3:00 AM ET.","source":"Crypto Gaming Platform PlayDapp Suffers $290 Million Breach — Elliptic","source_url":"https://www.elliptic.co/blog/crypto-gaming-platform-playdapp-suffers-290-million-breach"},{"date":"2024-02-12","event":"Negotiations break down at 3:35 PM. At 10:09 PM, the attacker mints an additional 1.59 billion PLA tokens (~$253.9 million), bringing total illegitimate minting to 1.79 billion tokens and cumulative nominal losses to ~$290.4 million.","source":"PlayDapp Post-Mortem — PlayDapp Team (Medium)","source_url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"date":"2024-02-13","event":"PLA smart contract is paused at 11:05 AM, halting further minting. PlayDapp threatens FBI referral and full law enforcement engagement if the attacker does not comply. Elliptic labels attacker wallets in its compliance tools.","source":"Hackers Mint 1.79 Billion Crypto Tokens from PlayDapp — BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/hackers-mint-179-billion-crypto-tokens-from-playdapp-gaming-platform/"},{"date":"2024-02-26","event":"Snapshot of legitimate PLA token balances taken as the basis for the upcoming 1:1 migration to the new PDA token.","source":"PLA to PDA Token Migration Tutorial and FAQ — PlayDapp Team (Medium)","source_url":"https://medium.com/playdappgames/pla-to-pda-token-migration-tutorial-and-faq-a539ded1b42f"},{"date":"2024-03-13","event":"PlayDapp migration portal launches, allowing PLA holders on Ethereum and Polygon to swap to new ERC-20 PDA tokens at a 1:1 ratio. The new contract includes multi-signature controls.","source":"PlayDapp Post-Mortem — PlayDapp Team (Medium)","source_url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"date":"2024-08-01","event":"PlayDapp reports that over 90 percent of eligible PLA tokens have been successfully migrated to PDA.","source":"Updates on PLA to PDA Token Migration — PlayDapp Team (Medium)","source_url":"https://medium.com/playdappgames/updates-on-pla-to-pda-token-migration-8fd3ad213069"}]},"v":1}