Thread by @MangataFinance

Council Incident Report:

On October 6th, 2022, Mangata X was targeted with a governance attack which resulted in attackers gaining voting rights on the on-chain Council for a brief time. The incident has since been resolved, and Mangata X is fully operational.

Opening 🧵 1/9

2/9 🧵 The type of attack was novel. Instead of a technical hack, the attackers used a hostile takeover of the council at 4:39 AM UTC to authorize transferring KSM from the parachain sovereign account on Kusama to another Kusama account.

3/9 🧵 At 18:29 PM UTC we regained control of the council and countered the actions taken by the attackers in full.

4/9 🧵 All funds have been replenished. No user has their funds affected. Mangata X is fully operational and safe. Users do not need to take any additional action.

5/9 🧵 Our team is in contact with relevant parties to assess this matter in the most assertive way. We will provide more information going forward, in particular how other parachains can prevent this kind of governance attack in the future.

6/9 🧵 We will dedicate our next #MangataMonday community call on Monday, 5 pm UTC, to discussing this incident with the community and talking about the way forward. Register here 👉🏼 discord.gg/SPPeYw2R?event…

7/9 🧵 We have a blog post dedicated to all the details of what happened, how we reacted, and what learning we can share with the community.

Click here to read it: blog.mangata.finance/blog/2022-10-0…

8/9 🧵 We've also created an open discussion on our Discord server where the community can discuss this incident.

Members of the Mangata Communications Team will join the conversation in the dedicated channel. Join our Discord here 👉🏼 discord.gg/SPPeYw2R?event…

9/9 🧵 Remember to only trust our official channels. We will publish all relevant information on our official Twitter, Telegram, and Discord channels.

Mangata Twitter: @MangataFinance
Mangata Telegram: t.me/mgtfi
Mangata Discord: discord.gg/mangata

Kusama needs to send a strong signal that it protects Kusama users and their funds!

We are preparing #Kusama governance action to return the funds that belong to honest users.

We are starting with an open discussion

Please make your voice heard here: kusama.polkassembly.io/post/1872