NFT Marketplace Says $4.5 Million in Crypto Has Been Stolen

Vulkan Forged
(Image credit: Vulkan Forged)

The cryptocurrency heists just keep on coming: Vulcan Forged announced Sunday that 4.5 million PYR was recently stolen from 148 compromised wallets.

Vulcan Forged described itself as "an established non-fungible token (NFT) game studio, marketplace and dApp incubator with 10+ games, a 2,000+ community and top 5 NFT marketplace volume" in the whitepaper (PDF) announcing its PYR token.

PYR's value pales in comparison to other tokens. CoinMarketCap puts its highest price at $46.62 on December 1. It was trading around $30.98 before Vulcan Forged's disclosure; its price has dropped to approximately $22.14 at the time of writing.

That drop means whoever stole the 4.5 million PYR made off with $99.6 million rather than $139.4 million. (And that's assuming they can offload nearly one-quarter of the token's circulating supply, which CoinMarketCap puts at 18.9 million tokens.)

This haul is much smaller than the $600 million stolen from—and later returned to—Poly Network in October either way. But it comes in pretty close to the more recent theft of $150 million worth of ETH and BSC tokens from BitMart.

Nathaniel Mott
Freelance News & Features Writer

Nathaniel Mott is a freelance news and features writer for Tom's Hardware US, covering breaking news, security, and the silliest aspects of the tech industry.

  • husker
    So... dumb question here. What makes some cryptocurrency ripe for stealing while the rest remains safe (or is it)? Was this an inside job? Was "Vulcan Forge" at fault? Why bother spending time and money mining when you can just pluck it out of a supposedly safe wallet?
    Reply
  • InvalidError
    husker said:
    So... dumb question here. What makes some cryptocurrency ripe for stealing while the rest remains safe (or is it)?
    Nothing in particular, just people finding flaws in crypto exchanges and exploiting them to route crypto to their own wallets. They may or may not have help from the inside. Since most countries don't recognize crypto as a currency, stock, future or any other form of financial vehicle, none of the usual banking, securities and other protections apply, so the people who run these exchanges have low to no liabilities for lax security.

    Expect stories of people getting fleeced by crypto exchanges to be a recurring theme indefinitely.
    Reply
  • Endymio
    InvalidError said:
    Since most countries don't recognize crypto as a currency, stock, future or any other form of financial vehicle, none of the usual banking, securities and other protections apply, so the people who run these exchanges have low to no liabilities for lax security.
    Eh? Basic law still applies. If it has value, theft is a criminal act, and failure to provide adequate safeguards can and does result in civil liability. The only caveat is that the majority of crypto thefts are international or even multinational, which complicates the prosecution of such crimes.
    Reply
  • InvalidError
    Endymio said:
    Eh? Basic law still applies. If it has value, theft is a criminal act, and failure to provide adequate safeguards can and does result in civil liability.
    Crypto has no formally recognized value in most countries, it is just a fictitious thing people are gambling on. If a crypto exchange goes bankrupt from people filing civil lawsuits, chances are that authorities won't bother sifting through the servers to figure out who owns how much of a share of which wallet when they tear the servers down. If there is a 500M$ heist and the exchange + operators are only worth 5M$, you get ~$0 net back after everyone's own, lawyers and court costs.
    Reply
  • Endymio
    InvalidError said:
    Crypto has no formally recognized value in most countries,
    Name one.

    If there is a 500M$ heist and the exchange + operators are only worth 5M$, you get ~$0 net back after everyone's own, lawyers and court costs.
    That's true in countless civil suits, however, and is hardly unique to crypto. Place your million-dollar rental property in the hands of a small management agency who allows it to be trashed, and you'll get nothing whatsover from suing them. Does that mean the home had no value? Of course not.
    Reply
  • InvalidError
    Endymio said:
    That's true in countless civil suits, however, and is hardly unique to crypto.
    When you deal with banks and conventional investments, the brokers must have bonds and/or insurance to back liabilities in case they screw up. Crypto is basically a grey-market product that comes with none of those.
    Reply
  • Endymio
    InvalidError said:
    When you deal with banks and conventional investments, the brokers must have bonds and/or insurance to back liabilities in case they screw up.
    It depends on the investment, of course. There is no insurance on venture capital investment, and even FDIC insurance on bank deposits is limited to smaller accounts: deposit more than $250K, and you can lose every penny beyond that.

    Obviously crypto is an extraordinarily risky investment, especially if you have a non-diversified portfolio held by an exchange in a lightly-regulated foreign nation. That in no way implies that crypto itself "has no formally recognized value", or is unprotected by law.
    Reply
  • InvalidError
    Endymio said:
    That in no way implies that crypto itself "has no formally recognized value", or is unprotected by law.
    In most markets, crypto is a grey market item. When people trade on the grey market, you are mostly on your own when you get screwed over.
    Reply
  • Endymio
    InvalidError said:
    In most markets, crypto is a grey market item. When people trade on the grey market, you are mostly on your own when you get screwed over.
    Crypto is no more or less "grey" than any other value-bearing asset. If you place your megayacht or $50M Renoir for sale with an uninsured startup broker in Istanbul, you may well find yourself sorting out the intricacies of international law. Caveat Venditor.
    Crypto is not generally recognized as a currency or publicly-traded security, and thus lacks the additional legal protections these are generally granted. That's a different statement altogether, however.
    Reply
  • husker
    InvalidError said:
    In most markets, crypto is a grey market item. When people trade on the grey market, you are mostly on your own when you get screwed over.

    This makes sense to me. If Tom's Hardware invents "Tom Dollars" based on how many thumbs up a commenter gets and wraps it up in some kind of blockchain security, governments are no more or less obligated to regulate it than cryptocurrency. Crypto was made up out of whole cloth without the input or blessing of government. I don't believe the success or popularity of such a device is relevant to how heavily it is regulated other than the attention it may receive. It is only after the fact that gov agencies may be forced to deal with the theft or other shenanigans. The big difference between bitcoin and "Tom's Dollars" is the actual perceived value (real or otherwise) of the currency or stock or whatever you want to call it. Although stolen crypto could be viewed as something of value that authorities could investigate, since it wasn't set up through government agencies, it may not warrant any more special attention than a stolen scooter, for example.
    Reply