MANTRA Chain is back online, but silent code changes spark developer concerns

MANTRA Chain restored mainnet block production on v8.4.0 six days after a security incident forced a chainwide halt. The promised technical account remains unpublished, leaving the exploitation of the upstream dependency and the activity inside two project-managed wallets unexplained.

The official incident timeline says mainnet resumed at approximately 05:30 UTC on Aug. 22. The chain said there was no rollback or state change between the halt and restart, user balances were not altered, and token holders did not need to take action.

The team behind the chain marked the incident resolved on Aug. 24 but again said a postmortem would arrive in the coming days. Its current status page and official announcement channel contained no link to that report when checked on Aug. 27.

MANTRA said its analysis found that the incident affected two MANTRA-managed wallets and that no user, exchange, or partner funds were affected. The public account stops short of identifying the wallet addresses, transaction hashes, amounts, or technical exploit steps.

… Continue reading the full article at the original source below.