MIR4 Official Community

From my battle to our war, MMORPG MIR4

Greetings, This is MIR4. 

We would like to inform you that the PLAY Bridge service has been resumed (Including the HSPFE Reward Claiming function) on March 21st. All services including Bridge and Swap are now fully operational. 

As previously announced, the WEMIX Coins withdrawn from the vault will be fully restored using the foundation’s holdings. We have prioritized storing the necessary amount to resume the service to enhance security, and the remaining amount will be restored sequentially by distributing it across multiple wallets with thorough stability assessments.

* We have restored the initial quantity to ensure stable service and will proceed with additional restoration while monitoring service usage. However, temporary delays may occur in the event of a sudden surge in bridge demand. We kindly ask for your understanding, as this is a necessary measure to enhance security.

We sincerely apologize for any inconvenience caused during this security enhancement process and appreciate your patience and understanding.

The WEMIX Team has thoroughly analyzed the PLAY Bridge incident and implemented comprehensive security enhancements across all services. We remain fully committed to continuously strengthening the security of WEMIX services by learning from this painful experience.

Below are the details of the measures implemented as a part of service resumption: 

[Measures to Enhance Security]

Primary Measures for Service Resumption

The following measures have been implemented to resume and normalize the services:

• Comprehensive Penetration Testing : The affected logic and authentication logic have been replaced to block the access from the same attack vectors. This was first applied to the NFT Bridge service and pre-released.      

• Full Infrastructure Migration : All blockchain-related server infrastructure has been migrated to a new environment to eliminate any risk of contamination by the previous attacker.

• Key Replacement : All public and private keys in the service have been replaced.

• Scaled the Scope of Service Monitoring and Control : The system is being upgraded to enable 24/7 real-time transaction monitoring and undergo an additional verification process for all suspicious transactions.

In summary, we resumed the service by introducing a new authentication logic and migrating to a more secure infrastructure to strengthen the security, rather than simply reinforcing the existing infrastructure. 

Additional Measures for Security Enhancements 

In addition to the above-mentioned measures taken for service resumption, the following measures have also been implemented:

• Strengthened the Network Segmentation

• Enhanced the Access Control to Main Servers

• Account Access Management by Purposes 

• Expanded Multi-Factor Authentication (MFA)

• Improved Security Monitoring and Tracking Systems 

Thank you.