We are investigating a security incident that occurred for the token, $GUA, through a suspected address poisoning attack on May 27, 2026, which has caused significant volatility on the token.
Initial findings indicate an address manipulation through a multisig transaction intended to release additional unlocked tokens into the airdrop claim contract, which allows users to claim unlocked airdrops.
The intended address for this is 0x70ae7D3DECfB4C3aE996fb1c07092566F73D5c15 (the intended address) but the resulting address the executed transaction sent to was 0x70AE678b457C5E1b3fD7AD9537F234dFc1795C15 (the hacker address).
The hacker address never had any interaction with any addresses associated with SUPERFORTUNE previously, so address poisoning as an attack vector is unlikely. Furthermore, internal operating procedures account for address poisoning attempts by matching addresses through several checks.
We are continuing to investigate the hack and will provide the community on an ongoing basis. We have contacted authorities and incident response teams to assist.