PlayDapp
Summary
PlayDapp is a South Korean blockchain gaming platform and NFT marketplace founded in 2017 and operating on Ethereum and Polygon. In February 2024, an attacker who had obtained PlayDapp's contract deployer private key via a phishing email added themselves as an authorized minter and minted 1.79 billion PLA tokens across two events, representing a nominal loss of approximately $290 million. The platform subsequently suspended the PLA smart contract and executed a 1:1 migration to a new token (PDA) to remediate the illegitimate token supply.
Connected Entities
1 entities · 10 linked investigations- + 1 more
Timeline(11 events)
2019-01-01
CryptoDozer and DozerBird, PlayDapp's first blockchain games, launch on Ethereum. CryptoDozer surpasses CryptoKitties in daily transaction volume.
IQ.wiki — PlayDapp2024-01-16
A PlayDapp team member receives a domain-spoofed phishing email mimicking a trusted exchange partner. Opening the attachment installs a malicious remote-access tool, leading to exfiltration of the contract deployer private key.
PlayDapp Post-Mortem — PlayDapp Team (Medium)2024-02-09
Attacker uses the stolen deployer private key to add wallet 0xD151050d43c28690766f50Ce9ea8686c5D243a40 as an authorized minter. 200 million PLA tokens (~$36.5 million) are minted and dispersal to exchanges begins.
PlayDapp Post-Mortem — PlayDapp Team (Medium)2024-02-10
PlayDapp detects the unauthorized minting. Platform alerts partner exchanges and requests suspension of PLA deposits and withdrawals.
Explained: The PlayDapp Hack — Halborn2024-02-11
PlayDapp broadcasts an on-chain message to the attacker offering a $1 million white-hat bounty in exchange for return of contract control and all stolen assets, with a deadline of February 13 at 3:00 AM ET.
Crypto Gaming Platform PlayDapp Suffers $290 Million Breach — Elliptic2024-02-12
Negotiations break down at 3:35 PM. At 10:09 PM, the attacker mints an additional 1.59 billion PLA tokens (~$253.9 million), bringing total illegitimate minting to 1.79 billion tokens and cumulative nominal losses to ~$290.4 million.
PlayDapp Post-Mortem — PlayDapp Team (Medium)2024-02-13
PLA smart contract is paused at 11:05 AM, halting further minting. PlayDapp threatens FBI referral and full law enforcement engagement if the attacker does not comply. Elliptic labels attacker wallets in its compliance tools.
Hackers Mint 1.79 Billion Crypto Tokens from PlayDapp — BleepingComputer2024-02-26
Snapshot of legitimate PLA token balances taken as the basis for the upcoming 1:1 migration to the new PDA token.
PLA to PDA Token Migration Tutorial and FAQ — PlayDapp Team (Medium)2024-03-13
PlayDapp migration portal launches, allowing PLA holders on Ethereum and Polygon to swap to new ERC-20 PDA tokens at a 1:1 ratio. The new contract includes multi-signature controls.
PlayDapp Post-Mortem — PlayDapp Team (Medium)2024-08-01
PlayDapp reports that over 90 percent of eligible PLA tokens have been successfully migrated to PDA.
Updates on PLA to PDA Token Migration — PlayDapp Team (Medium)Decision Log
- hash: 5xL9JWqttmimjp7Q5RTxtNfq6oMQVGzctg8pM6zK66S7
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-5
generated: 5/30/2026, 12:59:42 PM
last updated: 5/30/2026, 12:59:46 PM
avoid.net — verified advice for a post-truth world