CryptoSlate reported that a hacking incident occurred on GalaChain, where approximately 2 billion GALA ($3 million) and dozens of other tokens were stolen through an attack exploiting signatures from failed transactions. The hacker collected and reused 74 valid signatures from 60 failed transactions over the past 55 days. This was possible because when a transaction ultimately failed, the unique transaction key was rolled back, leaving the same signature publicly available and reusable. Gala temporarily suspended its bridge, then modified it to directly extract type information from called operations, and completed a patch to permanently exhaust replay keys even for failed transactions.
