The hacking incident

Our Team successfully rolled out the process of merging our ecosystem tokens into one token on January 4th 2023. The launch of our GameFi and reward-sharing system on January 5th 2023, followed this. Launching our GameFi and reward-sharing system required that we fund our DEN with $LEON, $BUSD, $BNB and $ZBG. Unfortunately, on the same day of the launch of our reward-sharing model, a malicious actor managed to gain access and clean out all the tokens in our DEN(Reward Pool). This included 360M $LEON, Around 22k $BUSD, 450 $BNB, and 10k worth of $ZBC. The malicious actor immediately sold all the $LEON tokens stolen on our DEX and thus drained our liquidity pool. The sell-off of the stolen $LEON tokens resulted in about a 95% price drop.

Below are the details of how the hacker succeeded:

Our DEX and Devdex environment had the following React property enabled by default (this is enabled by default for all React apps, even apps like PCS):

GENERATE_SOURCEMAP

We suspect that the hacker could use a debugger to access the source code of our frontend via both devdex and our dex to search for our private keys used to access our backend.

This exposed our backend API’s authentication key, allowing the hacker to call our backend to get access to our Den wallet’s private key used to interact with the payment wallet autonomously.

The code has since then been obfuscated.

Entire Leonicorn Swap Caves , Single Locked Staking , Merge and Farming pool is safe. Only Den Wallet Effected on this Exploit.

Reconstruction Leonicorn Swap

We are planning to raise emergency funding of $500,000 to enable us to resume operations. At the moment we are exploring all opportunities available to secure this funding.

What the Emergency fund will help us accomplish

Specifically, the funding will help us accomplish the following:

1. Set a liquidity pool which will ensure equivalent market value for ecosystem tokens prior to the exploit.

2. Resume operations and continue with our plans for growth

3. Have reserve funding for uninterrupted operations

4. Improve security of our ecosystem

5. Restore and deepen faith & confidence in vision of Leonicorn ecosystem.

Recovery plan

We have an elaborate plan for recovery that will ensure we can resume operations in full force after implementing additional protocols and security layers to eliminate the recurrence of the exploit. Our recovery plan includes:

Moving all remaining funds to new Treasury Wallet Fixing all security vulnerabilities Redeploying all DEX contracts Obtaining a list of holders at January 6th 12:38 AM +UTC (That is, before the exploit) Creating a new ecosystem token, $LEONS Reduce supply to 400M From 4B and airdrop users based on 10:1 Ratio. Airdropping new token to holders before Hack. Opening liquidity pool for new token by ensuring starting price is equivalent to $.047, which is 10x Higher Price. Extra security measures

We intend to use bounty platforms and audit reviews to test our ecosystem before deployment. Additionally, we will implement internal protocols that will limit the recurrence and/or impact of future events.

Some of our Success stories the day we launched Gamefi

Good Droids mint will take place on January 16th at 4 PM EST for 100 $ADA & a supply of 3000. A snapshot will be taken of every beta pass holder who has DELISTED by January 15th at 3 PM EST. Every wallet in the snapshot will be allowed to mint their Good Droid on January 16th at 2 PM EST for 0 $ADA. If you are granted a free mint and fail to claim by the time the project has sold out you will not be able to claim because the contract will be locked at a supply of 3000. To counteract this you will be allowed to mint 2 hours in advance of the public sale. The mint will be conducted by Peppermint which has completed several successful mints and has proven to have the best anti-botting measures. All assets will be revealed upon mint & there will be 0 exclusive 1/1 Good Droids.

The Good Droids website is an interactive computer where you can access our Discord dashboard, Twitter, & TradingView charts all in the same place. We will be implementing $GD games and resources after the launch of the token. More information on $GD can be found below.

The Good Droids dashboard currently has over 500+ bots in counting contributing real-time information for a Cardano and a plethora of other coins built all on discord. Each user will have a completely separate personalized layout for their dashboard by choosing the channels they would like to view. The current options you can select for your dashboard are Alpha, Student, Social, News, Influencer, Crypto Alerts, Whales, Leverage, Exchange Trackers, Data, AI Signals, Trends, Retail Flips, Developers, Sportsbetting, ETH, SOL, Altcoins, and most importantly ADA. A preview of the channels within each role can be found on our discord. Our bots track on-chain activity, every news outlet, influencer, whale wallets, AI-generated trade signals, and current market data. All within 10 seconds of an event triggering on our bots. Students can download free e-books to learn the fundamentals of trading & ADA users can see how their favorite projects are performing all in one place.

Tired of so-called “alpha callers” dumping their bags on you? The Good Droids alpha board is a decentralized shoutbox of ideas. When you see a post from one of the feeds that you would consider “alpha” simply react to it with the :alpha: emoji. Highlighting valuable information to the rest of the community. Members who actively react to the alpha board will be rewarded with $droid for their findings. The 2nd part of the alpha board is the alpha calls forum. This is where members can discuss future mints, trades, or ideas they have about a topic in a condensed chat. Top posters to the alpha calls channel will also be rewarded with $droid.

Everyone has access to the public terminal which is the destination for all the command bots on the Good Droids server. We have bots to pull up NFT floor charts, any graph, indicators, AI art generation, ChatGPT (soon), and all the Good Droid minigames. Users with dashboard access can open a private terminal where they can use commands in private without the clutter of the rest of the server. This can be a powerful tool for those who want to document and track their trades.

$droid is NOT a cryptocurrency. This is exclusively a discord economy with 0 intrinsic value. It is the reward for participating in the community. It can be earned by typing !daily in a terminal & playing games. Another way to earn is by, inviting friends, reacting, chatting, and giveaways. Currently, it can be used to buy our beta passes for FREE or our partner's CNFTs. We are going to be releasing a lot more goodies into the shop over the coming months so keep stacking that $droid!

This will be our native Cardano token. This token will be tradeable on all of your favorite Cardano dexes. $GD will be earned by staking your Good Droid (more information on staking below). $GD will be the Good Droids ecosystem token and will be the only way to mint future GD Degen Mints. These will be cheap, fun, PFP mints with a low supply. The art for each degen mint will be designed by a member of the community. More information on Degen Mints post Good Droids mint. $GD will also be used to play similar games to $droid like a coin flip, dice, and our exclusive game “RUGGED”. “RUGGED” will be released in Q2 2023. $GD tokenomics will be further explained on the release of staking.