According to SOON, the project detected a security incident affecting its operations on July 12 and paused its sequencer and related services. The incident stemmed from configuration errors and permission management issues in the operational infrastructure; external attackers gained unauthorized access through misconfigured services, though no protocol vulnerabilities, sequencer exploits, or user smart contract compromises occurred, and user assets remained unaffected.
SOON engaged BlockSec for independent review, replaced affected credentials, and rebuilt and hardened related infrastructure components. NFT minting and token claim functionality recovered on July 21, with mainnet RPC service and block production restored to normal operations by July 27.