Gala Games minter private key was compromised on May 20, 2024, allowing minting of 5B GALA tokens (~$200M). The unused and unrotated key was likely stolen; attacker sold ~$200M before returning $22M (~11% recovery).