Hi. We have some bad news. There was a breach in HYC’s wallet. Someone gained access and withdrew all the funds last night totaling 94k ada. We’ve been reaching out to authorities and calling centralized exchanges in an effort to track and freeze funding taken from all of us.
We’ve been trying to find the words but at a total loss. Let me start by stating what happened:
1- We hired a dev, lovelydev0609 who had done work for many Cardano projects. He had climax1115#8736 working on the platform as well.
2- After build was completed, we beta tested in a small group for 3 weeks. The project launch was successful! We were excited to see everyone enjoying the platform. Bright future ahead.
3- Due to the response, the servers couldn’t handle the load so we had Lovelydev and team perform updates.
4- We reached out to other devs to assist from reputable sources like Anvil and Dave. We really appreciate their help and support.
5- Lovelydev had an issue working w other devs. At this time, users reported that the withdrawal function did not work. We went to Lovelydev asking why this was happening. He said it was for the users’ safety during this time.
6- We closed down the site for maintenance and during this period, noticed the funds had been withdrawn.
The wallet that transferred the funds out:
stake1u8wyx28s4q7a9ug5gvnc9fg3389p3eggnt5cxa9dvy9sjcgl00ezt
7- Examining this wallet, looks like it interacted with other projects worked on by Lovelydev as well.
8- The funds were sent to: $maryfreer
DdzFFzCqrhtBatWqyFge4w6M6VLgNUwRHiXTAg3xfQCUdTcjJxSrPHVZJBsQprUEc5pRhgMWQaGciTssoZVwrSKmG1fneZ1AeCtLgs5Y
On a wallet google search, seems like this wallet was scamming back in 2022.
forum.cardano.org/t/hacked/9…
9- In trying to find where the funds went we reached out to a few CEX’s in an effort to try and freeze funding.
10- We are at a total loss. If possible, would love to get the assistance of
@xerberus or any other sleuths to try and catch this serial scammer.
11- The investigation is still ongoing. Please reach out if you have any information.
We don’t want to accuse anyone without strong evidence. We will say that the only ones w access to that wallet were lovelydev’s team and myself And I didn’t take it. Was this a breach or outright insider theft?
We will continue to search for answers and hope to recover all funds. We’re deeply sorry and not going anywhere.