RocketSwap on Base Hacked and Taken Over

Following the LeetSwap incident, RocketSwap on Base has now fallen victim to a hack, with the extent of the damage still unknown.

Incident Details:
- Attack Confirmation: This morning (15/8), it was confirmed that the token swapping platform RocketSwap was hacked on Base. The hacker used a Brute Force method, generating valid passwords to gain control of the platform. The total extent of the financial damage is yet to be determined.
- Immediate Response: All RCKT tokens farmed/staked were hacked and swapped into WETH. Decentralized exchanges (DEX) remain unaffected. Upon discovering the attack, the RocketSwap team immediately shut down the platform to prevent further damage.
As a result of the team's investigation
— RocketSwap (@RocketSwap_Labs) August 14, 2023
We are sorry to inform you that the team needed to use offline signatures when deploying the launchpad and put the private keys on the server.
A brute force hack of the server was detected, and due to the proxy contract used for the farm…
Emergency Plan:
The RocketSwap team has proposed an emergency response plan:
- Deploy New Farming Contract: Remove the proxy contract and make the source code available on-chain.
- Adjust Farming Rewards: The new farming contract will reduce rewards by 0.075 units per block.
- Minting Rights: The project will relinquish minting rights, retaining only the allocation rights for new pools.
- Liquidity Lock: Initial liquidity will be locked, and 80,000 tokens will be locked for an additional year.
- Continue LaunchPad: The project will proceed with the LaunchPad and provide further updates.
- Reopen Telegram Groups: Groups will be reopened once the situation stabilizes.
- Negotiate with Hacker: Engage with the hacker to recover funds for victims of the attack.
The emergency programme agreed upon by the team is as follows.
— RocketSwap (@RocketSwap_Labs) August 15, 2023
1. We plan to redeploy a new farm contract by dropping the proxy contract and open sourcing it on-chain.
2. The new farm will advance the production reduction plan by 0.075 per block.
3. The team relinquishes…
Market Impact:
- RCKT Price Drop: The price of RCKT has plummeted, falling more than 55% in the past 24 hours.

Broader Context:
- BASE Popularity: BASE, a layer-2 network developed by Coinbase, has been a hot topic in the crypto market recently. During its testing phase, BASE attracted millions of users and formed significant partnerships, such as with Coca-Cola and other major projects for the Onchain Summer NFT commemorations.
- Challenges: Despite these achievements, BASE has faced numerous challenges, including the BALD memecoin rugpull, the collapse of the Frenstech (FRENS) memecoin, and the LeetSwap exploit, all of which have threatened its current standing.
The RocketSwap hack is another setback for Base, adding to the challenges the layer-2 network faces despite its recent successes and growing user base. The swift response and proposed emergency plan by the RocketSwap team aim to mitigate the damage and restore confidence among users.