The Ronin Network and Sky Mavis have vowed to upgrade their smart contracts, offer lucrative bug bounties and ramp up security following the $600 million hack late last month.<\/p>\n

As Cointelegraph previously reported, the Ethereum sidechain developed for the popular NFT game Axie Infinity was the victim of an exploit for 173,600 Ether (ETH) and 25.5 million USD Coin (USDC) worth more than $612 million at the time.<\/p>\n

Earlier this month the Federal Bureau of Investigation (FBI) attributed the attack to North Korea-based and state-sponsored hacking group Lazurus, as it fired off a warning to other crypto and blockchain organizations.<\/p>\n

Ronin announced its platform changes via a post-mortem report published yesterday, noting that all user funds are in the process of being restored as it vowed to make sure this \u201cnever happens again.\u201d<\/p>\n

\n
We have put together a postmortem regarding the Ronin exploit that occurred on March 23rd.<\/p>\n
\u2022 Why it happened
\n\u2022 What we’re doing to make sure this never happens again
\n\u2022 Ronin bridge re-opening updatehttps:\/\/t.co\/FfwCtCG84E<\/p>\n
\u2014 Ronin (@Ronin_Network) April 27, 2022<\/a><\/p><\/blockquote>\n
The hack run down<\/h3>\n
The hack was the result of a spear phishing attack on a former Sky Mavis employee (developers of Axie Infinity). The bad actor was able to leverage the employee\u2019s credentials to access Sky Mavis\u2019s four validator nodes out of a total of nine in the Axie\/Ronin ecosystem.<\/p>\n
This by itself was not enough to do any damage, but \u201cthe attacker found a backdoor through our gas-free RPC node, which they abused to get the signature for the Axie DAO validator.\u201d<\/p>\n
\u201cThis traces back to November 2021 when Sky Mavis requested help from the Axie DAO to distribute free transactions due to an immense user load. The Axie DAO allowlisted Sky Mavis to sign various transactions on its behalf. This was discontinued in December 2021, but the allow list access was not revoked,\u201d the report reads.<\/p>\n
Following the hack, big changes are being implemented at both Sky Mavis and the Ronin Network.<\/p>\n
Ronin<\/h3>\n
The Ronin Network hopes to have its bridge open again by mid to late May, with Binance providing support until then with withdrawal and deposit infrastructure for Axie users.<\/p>\n
The team is about 80% through upgrading Ronin bridge smart contracts, they\u2019ll be reworking the backend, migrating all pending withdrawals and launching a validator dashboard that \u201callows for approving large transactions and adding\/removing new validators.\u201d<\/p>\n
\u201cThe Ronin Network bridge is currently being redesigned and will open once we are confident that it can stand the test of time. We initially expected to be able to deploy the upgrade by the end of April, but this is not a process that we can afford to rush.\u201d<\/p><\/blockquote>\n
Related: <\/em><\/strong>Binance recovers $5.8M in funds connected to Ronin bridge exploit<\/em><\/strong><\/p>\n
Sky Mavis<\/h3>\n
Sky Mavis will ramp up its security measures by seeking the help of \u201ctop tier security experts,\u201d conducting contract audits and implementing stricter internal procedures such as training courses to \u201ccombat external threats.\u201d<\/p>\n
Notably, it will also be significantly upping its node count to help decentralize the project. Having already increased from nine to 11, Sky Mavis intends to get that number up to 21 within three months. Longer-term, the project is eyeing more than 100 nodes.<\/p>\n
Sky Mavis will also be launching bug bounties of up to $1 million for any white hat hackers who are able to find further vulnerabilities.<\/p>\n
\u201cWe recognize the importance and value of security researchers\u2019 efforts in helping keep our community safe. Sky Mavis is offering bounties of up to $1 million to encourage responsible disclosure of security vulnerabilities.\u201d<\/p><\/blockquote>\n