Purpose
After contacting support and submitting a support ticket, this article explains the additional steps someone could take in the event that they have been compromised.
Assumptions Made
This article assumes you understand the information in the following articles:
Keeping a Gala Games and Entertainment Account Secure
What is 2 Factor Authentication (2FA) and How to Enable it
What is a Recovery/Seed Phrase?
Procedure
In the fast-paced world of web3, safeguarding your account and wallet is paramount. Despite best efforts, there is always a risk of becoming compromised. It is crucial to act swiftly if you suspect unauthorized access to your wallet or account.
If you experience this situation, we recommend following these steps as soon as possible:
- Create a new wallet
- Write down your new recovery seed phrase and store it somewhere safe
- In your compromised wallet, send any remaining funds or items to the new wallet. It is possible for bad actors to implement a script to sweep any added items from the compromised wallet. If you suspect a sweeper script is active on the wallet, do not send any additional tokens.
- A "sweeper script" refers to a program or script that can automatically transfer funds from a wallet into the malicious actor’s destination address.
- Avoid using the compromised wallet in the future.
- Once the user has taken proactive measures to ensure there are no further losses, an individual may choose to report this situation as detailed below.
1. Report the bad actor’s ETH address on the Ethereum blockchain. Platforms such as Etherscan and OpenSea allow you to do this.
2. Contact your local cybercrime authority. While we cannot include a link for every location, we’ve provided some below:
- United States: IC3
- European Union: Europol
- Philippines: CICC
- Brazil: Local State's Cybercrime Unit
Note: It's important to understand that once transactions are made on the blockchain, they are irreversible, and Gala Games and Entertainment cannot retrieve what has been lost.