Security Update
We recently identified and addressed an exploit involving the token redemption system.
A player manipulated their mining statistics to display an invalid block count and successfully triggered an automatic payout from the treasury wallet. The account has since been permanently banned, removed from the leaderboard, and prevented from making further progress.
Incident transaction:
solscan.io/tx/5EAVdV6DZKh3YA…
To prevent similar incidents, we've implemented the following changes:
• All token withdrawals now require manual admin approval before any
$MF leaves the treasury
• Players may only have one pending withdrawal request at a time
• The minimum withdrawal amount has been increased to 10,000
$MF
• The treasury wallet no longer automatically signs transactions through the API
Additional safeguards currently in place:
• Server-side mining validation
• Anti-cheat enforcement and ban system
• Manual review of all token payouts
• On-chain payment verification for pickaxe purchases
• Anti-replay protection on transactions
Mining, gameplay, and earning
$MF continue to function normally. The only change is that withdrawals now go through a manual verification process before being processed.
We also want to reassure the community that creator fees are being used, and will continue to be used, to strengthen the Minefable economy. A portion of these funds will be allocated toward buying back
$MF from the market and redistributing value back to genuine players who participate fairly in the ecosystem.
We appreciate everyone who reported suspicious activity and helped us identify the issue quickly. Our priority remains protecting legitimate players and maintaining a fair environment for everyone.