Dear Astra DAO Community,
We are writing to inform you about a recent security incident that has impacted our community and to outline the immediate actions we are taking to address it.
The Incident
On 09/14/2023, one of our developer's wallets holding reward funds for Arbitrum was compromised.
A total of 4,008,980,255,563 ASTRADAO tokens, originally intended as rewards for staking contracts on Arbitrum, were stolen from the Astra DAO Deployer wallet. These tokens were subsequently sold for 8.752 ETH, resulting in a total monetary loss of $14,158.31.
Astra DAO smart contracts are fine and are not compromised.
Immediate Actions
In response to this unfortunate event, we have taken swift and decisive actions to mitigate the impact and restore trust within our community:
-
Pausing and UnPausing ASTRADAO Token: We immediately paused the ASTRADAO token to prevent further unauthorized transactions or trading. The token has been unpaused and is tradable.
-
Changing Admin and Owner Addresses: To enhance security and prevent further unauthorized access, we have changed the administrative and ownership addresses associated with the Astra DAO contracts to a new wallet.
-
Token Recovery: To mitigate the financial loss and reverse any negative publicity, we are exploring the option of purchasing ASTRADAO tokens worth 8.752 ETH back from the Uniswap pool. This demonstrates our commitment to resolving the issue and protecting our community's interests.
-
Incident Review: After the immediate actions are completed, we will conduct a post-incident review to identify lessons learned and implement additional security measures to prevent similar incidents in the future.
We will update you on any further progress in resolving this issue and implementing the necessary security enhancements. We appreciate your understanding and support during this time.
Your trust means everything to us, and we are determined to emerge from this incident more secure than ever before.