じょにす

[Notice] Emergency Maintenance and Security Incident Hello, this is MapleStory Universe. The maintenance currently in place across all services is a response to unauthorized external access to MSU’s off-chain server infrastructure. It took time to bring you this notice because we first needed to confirm the facts and the actual scope of impact and to carry out the necessary measures. We apologize for the inconvenience. Below is what we have confirmed so far and the actions we have taken. Our investigation is ongoing, and we will share further updates on our official X account as we learn more. 1. What happened * On November 12, we confirmed unauthorized external access to part of MSU’s off-chain server infrastructure. Based on what we have confirmed so far, the blockchain and smart contracts are not affected. * We blocked the access path immediately and, to prevent further impact, placed all services under maintenance from 04:43 (UTC) on November 12. 2. No loss of assets * After reviewing on-chain records and service operation wallets, we found that no assets were moved or stolen as a result of this incident. * Users’ wallet private keys are held only by users and are never transmitted to or stored on MSU’s systems. They are therefore not among the data accessed in this incident. 3. Service operation keys and contract permissions * The operational private keys that can move assets are stored in encrypted form. All attempts to access the key management system required to decrypt them were blocked. * No operational private key was exposed. * There has also been no change to the permission settings of our smart contracts. Token supply is therefore unchanged, which anyone can verify from on-chain records. * As a precaution, we will nonetheless replace all operational keys with new ones before resuming service. 4. Information accessed (confirmed so far) * The investigation is still ongoing. Based on what we have confirmed so far, the information below was accessed for some users, and this may change as the investigation continues. * Among users who have registered an email address with MSU, we will contact those who may have been affected separately by email. * The information confirmed to have been accessed by an unauthorized party is the following, from records dated after 23:26 (UTC) on November 4, 2026. * Account information: wallet address, nickname, profile image, sign-up time and last login time, country and city of last access * Login history: login time, IP address, country and city, device and browser information, session key * Email information: part of the email address (the first 12 characters) * Linked social account information: type of service (such as Discord), username, and user ID * OpenAPI usage records: wallet address, IP address, app ID, API path, request and response contents * Shop terms consent records: wallet address, purchase ID, type of terms, consent time * Transaction and service activity records: token transfers, marketplace trades, notifications, and in-game item, currency, and character changes, each with the related wallet addresses * Which of these apply to you depends on your activity during this period and on what you registered with MSU, such as an email address or a linked social account. * For builders: app information registered in the Builder Center was also accessed for 328 apps. This includes builder wallet address, nickname, API key, and OAuth client ID. * We have confirmed that the exposed API keys cannot be used to affect assets. * We will help builders reissue their API keys and will share instructions separately. * The records confirmed to have been accessed so far do not include real names, phone numbers, physical addresses, KYC information, or payment card information. * We will share any further findings on the MapleStory Universe website and the official X account. 5. What this may mean for you * These records link a wallet address to a nickname, an IP address, an approximate location (country and city), and device information, and for some users to part of an email address or a linked social account. Someone holding them could connect a wallet’s public on-chain activity to that information. * They could also be used to send phishing or impersonation messages that look credible, by email or through linked social accounts. 6. Security measures taken * We blocked the path used in the attack and revoked all access credentials confirmed to have been obtained by the attacker. All subsequent attempts to reuse them were denied. * Affected servers have been replaced with new ones. 7. What you need to do * Based on what we have confirmed so far, you do not need to change your wallet or move your assets. * MSU will never ask for your private key or seed phrase. Please be cautious of emails, messages, or websites that impersonate MSU using the partial email addresses, wallet addresses, nicknames, or social account names accessed in this incident. * Do not connect your wallet to, or sign transactions on, any site you reach through a link in an email or message about this incident. * Check announcements on the MapleStory Universe website and the official X account. 8. Service resumption * Services will resume once we finish replacing our internal operational keys and completing our checks. The expected time is around 19:00 (UTC), November 12, and may change depending on the results of those checks. * We will announce the resumption time and progress on the MapleStory Universe website and the official X account. 9. Interim measures for the game * Entry to Chaos Gloom has been restricted. We plan to open it over the weekend and will announce the exact time later. * Daily boss entry counts that may have been deducted when the servers went down earlier today have been restored. * Maintenance compensation will be provided. We will announce the details later. 10. Contact * For questions about this incident or about your personal data, contact us at terms_policy@nexpace.io. Thank you for your patience.