The recent $62 million hack of the NFT-gaming project Munchables led to discussions within the crypto community regarding the centralization of Ethereum rollups, particularly Blast. Concerns were raised about Blast's core team having the ability to manually reverse the damage caused by the hack.
Fortunately, the situation did not require intervention from Blast's core team, as the rogue developer responsible for the theft eventually returned the funds voluntarily.
A total of $97 million was secured in a multisig wallet by Blast core contributors, with efforts being made behind the scenes to ensure the return of the stolen funds without any ransom demands. The incident raised questions about the decentralization of blockchain ledgers and the risks associated with interference in supposedly immutable systems.
The hack itself was executed through a well-planned scheme by a rogue developer who had admin access to manipulate the Munchables contract before its official launch. By assigning themselves a significant amount of ether, the exploiter was able to drain funds once deposits started flowing into the upgraded contracts, resulting in a loss of over $62 million.
The culprit behind the hack was initially suspected to be a member of the DPRK’s Lazarus Group, with connections to other projects and individuals in the crypto space. The incident highlighted the risks associated with centralized powers and the challenges of maintaining decentralization in blockchain networks.
The debate around Blast's handling of the hack brought comparisons to the 2016 The DAO hack, which led to a similar amount of losses. The incident reinforced the importance of maintaining the integrity and security of blockchain systems, while also raising questions about the role of centralization in addressing security breaches.
Overall, the Blast L2 hack served as a reminder of the complexities and challenges faced by blockchain projects in balancing decentralization with security and governance.
