Reminder: Mattle Reward Phase 3 is LIVE 🚀
Key notes:
• 4M $MATTLE up for grabs
• The more you grind, the more you earn
• Ends July 10, 2026
Track your allocation: https://t.co/cpQ3paEJCE
Incident Update
Yesterday, our platform experienced a DDoS attack that caused temporary service disruption. The team has mitigated the issue and the website was restored after approximately 3 hours.
However, some instability may still occur, particularly affecting gameplay and score tracking.
Our team is actively working around the clock to fully stabilize the system and ensure everything returns to normal as soon as possible.
We truly appreciate your patience and support during this time.
Phase-2 Conversion Dashboard is now live:
https://t.co/NAFW3hghOB
Notes:
- Convert now, deadline is March 20
- No convert, no allocation
- Requirements: Verified role, 10+ games played in Phase 2, 100k+ points
- Rewards will be available to claim on March 21 - no vesting
- Points have been reset to 0, new points will count toward Phase 3
Mattle Key Exploit - Incident Report
Approximately 13 hours ago, the Mattle Key feature was compromised, allowing an attacker to exploit around 500,000 $MATTLE from the Key Vault.
1. Attack Method
The attacker compromised our API layer and was able to generate unlimited Mattle Keys. These keys were then used to repeatedly open rewards containing $MATTLE and withdraw funds from the Key Vault.
It is important to clarify that this was a Web2 infrastructure attack. Our smart contracts, staking system, and user wallets were not affected and remain completely safe.
2. Impact
The Key Vault operates with a limited allocation model. Funds in the vault are refilled periodically rather than stored in large amounts. This design helps mitigate potential damage in the event of an incident.
Because of this structure, the scope of the exploit was limited to approximately 500k $MATTLE. After extracting the funds, the attacker sold the tokens on the open market, which caused a temporary price drop of around 30%.
3. Immediate Actions
Once the issue was detected, the team immediately:
- Identified and analyzed the attack vector
- Patched the vulnerability in the affected API
- Conducted a system-wide security review
All MattleFun features are now operating normally, and users can continue using the platform as usual. The Key Vault has been refilled, and users are once again able to claim rewards from Mattle Keys.
4. Market Stabilization
To help stabilize the market following the incident, we deployed 20 SOL from Shop revenue to buy back $MATTLE. The goal of this action is to help restore the market price to the level prior to the exploit.
Buyback transaction proof:
https://t.co/7FLBA78NHT
5. Closing
We sincerely apologize to the community for this incident. Security remains our top priority, and we will continue strengthening our systems to prevent similar situations in the future.
Thank you for your patience, trust, and continued support of MattleFun.
Staking Leaderboard is now live
You can now view the epoch leaderboard on the staking dashboard.
Ranking is based on Total SP and top users may receive additional rewards.