You might ask, "how could papi have rugged the moats??"
Simple. We had a permission failure that was known and being patched. Papi took the backend server being down for everyone as personal discrimination against himself. He is so egotistical he could not understand it was a system wide outage for all admins attempting to create their automated wallet. I was then pressured by people he was hawking to fix it for him specifically. I caved and attempted to give him access to his automated reward wallet. Due to the permissions issue on our backend, he was mistakenly given access not just to his wallet but ANY automated reward wallet. He then used his reward wallet to fund the attacker, as linked on chain here:
https://snowtrace.io/tx/0x69b806ddf8e8a79b59ec4ba4da218752535853abde36463434db09307524c075?chainid=43114
Following the onchain evidence, Papi then proceeded to attack wheremalek and every other reward wallet with value, abusing his faulty permissions. He then attempted to shift blame and play victim, as we are all seeing now.
Yes, we had a private key compromised, however after further investigation after the postmortem, it is not conclusive that this was the cause, as no new admins were entered into the system after papi according to our server logs. The entire attack took place roughly 6 minutes after he was given access to his reward wallet. As a result, a criminal compliant has ben filed with the FBI, IRS, and relevant local law enforcement.
We will keep you posted on the updates to this case as we hear back. Again, i sincerely apologize that our backend enabled this to occur and that I listened to those pressuring me to attempt at fixing his issues individually.
Our new automated wallet system is currently in development and will undergo proper audits from security partners. No staked, locked, or burned tokens were affected by the attack nor are they at risk now. All funds are safe. Thank you for your support as we move forward. Onwards and upwards
