Ronin Bridge $625M Hack event

Event · PageRank 0.0067

Also known as: Axie Infinity Ronin Hack

Overview

On March 23, 2022, attackers drained roughly 173,600 ETH and 25.5 million USDC — about $620–625 million — from the Ronin bridge, the Ethereum sidechain built by Sky Mavis to power the game Axie Infinity. The theft went unnoticed for six days and was only discovered on March 29 when a user could not complete a withdrawal. The attackers obtained control of five of the nine validator keys securing the bridge; the intrusion began with social engineering, in which a Sky Mavis engineer was approached on LinkedIn with a fake job offer and opened a malware-laden document. In April 2022 the U.S. Treasury attributed the attack to North Korea's Lazarus Group, and the incident stood as the largest crypto theft to that point.

Within the DeFi Intel graph, Ronin Bridge $625M Hack connects to 2 tracked entities, most strongly to Ronin, Ronin Bridge.

Relations

Top connections in the DeFi Intel knowledge graph (confidence-weighted, 2 of 2 total).

Frequently asked questions

How much was stolen in the Ronin bridge hack?

About $620–625 million, comprising roughly 173,600 ETH and around 25.5 million USDC.

When did it happen and how long before it was noticed?

The attack occurred on March 23, 2022 and was not detected until March 29, when a user reported being unable to withdraw funds — six days later.

Who was responsible?

U.S. officials attributed the hack to North Korea's Lazarus Group. The intrusion started with a fake LinkedIn job offer that led a Sky Mavis engineer to open a malicious document.