Security and scams · Explainer
Gala Games and the 'Town Coin' Scam Claims: What's Verified
Gala Games grew into one of the biggest blockchain gaming brands, then drew headlines for a founder feud, a 2024 token-minting exploit and loud scam accusations. This guide separates what is documented from what is opinion, including the 'Town coin' claim, and shows how to protect yourself.
By the DappsAtlas editorial team · Updated

What is the 'Town coin scam' people link to Gala Games?
Searches for a 'Town coin scam' tied to Gala Games usually mix several different stories. Gala runs a game platform with its own GALA token, and its farming game Town Star has carried its own in-game token. When people say 'Town coin', they may mean that in-game token, a lookalike token, or they may be folding general anger about GALA into one phrase.
Here is what the sources we reviewed do and do not show:
- Documented: a public dispute between Gala's two co-founders in 2023, with lawsuits accusing each other of taking tokens and misusing company funds.
- Documented: a May 2024 exploit in which an attacker minted 5 billion GALA, which Gala called an isolated incident and admitted was its own error.
- Documented: concern in 2023 over a token replacement process and a drop in the GALA price after the founder dispute became public.
- Opinion: forum and social posts calling GALA or its tokenomics a scam.
- Not found: a specific, proven fraud case involving a Town token.
That last point matters. A scam is a deliberate deception to take money. A hack, a governance fight and a poorly designed token supply are different things, even if all of them can cost holders money. This guide keeps those categories apart so you can judge risk accurately rather than relying on a headline.
If you arrived here because you hold a Town-named token and are unsure about it, skip ahead to the sections on checking tokens and on what to do now.
How did Gala Games become a major blockchain gaming brand?
Gala Games started as a platform for blockchain games where players own in-game items as NFTs and earn or spend GALA. It built a large community by giving away node licenses, running several game titles and promoting an ecosystem of games rather than a single hit.
The model had three parts worth understanding:
- A shared token. GALA is used across the platform for rewards, purchases and other in-game functions.
- Node operators. People who bought licenses ran software that supported the network and received GALA rewards over time.
- A game portfolio. Titles such as Town Star, a farming and city-building game, helped onboard players who cared more about gameplay than trading.
That reach is why the project's problems drew so much attention. A token with a big, active community has many holders who feel directly affected by any security or governance event. It also means many people hold it because of the game, not because they studied the token's supply and controls.
The success was real in terms of audience and brand recognition. But a popular game does not guarantee a safe token. Supply schedules, who can mint tokens and who controls the contracts are separate questions, and they are the ones that mattered in the 2023 and 2024 episodes covered below.
For current prices, market capitalization and holder counts, check a market data site and the project's own announcements, since those numbers change daily and any figure printed here would go stale.
What happened in the 2023 founder dispute?
In September 2023, reports described a public fight between Gala's two co-founders. Each filed lawsuits against the other, with accusations including coin theft, market manipulation and misuse of company funds. One report put the value of tokens at issue at roughly 130 million dollars.
For holders, the dispute created uncertainty about who controlled what. Coverage at the time noted that the GALA price fell by more than a quarter as players and investors worried about both the founders' conflict and doubts around a token replacement. Token replacement means moving holders from an older token contract to a new one, which normally requires trust that the team controls the process correctly.
A few points to keep straight:
- Lawsuit allegations are claims, not findings. Courts decide outcomes, and settlements can end cases without a ruling.
- A founder dispute is a governance risk. It does not prove that the token is fraudulent.
- Even so, a conflict over who holds large token balances shows that centralized control existed. That is a risk in itself.
We did not find a definitive outcome in the sources reviewed, so do not rely on this article for the current legal status. Check recent court reporting and Gala's official statements for the latest.
The lesson for any project: when founders hold or control large token balances, the project's stability depends on their relationship. Look for vesting schedules, multi-party control of treasuries and public lockups before assuming that large allocations are safe.
What happened in the May 2024 GALA mint exploit?
On a Monday in May 2024, an attacker used an exploit to mint 5 billion GALA tokens. Decrypt reported that Gala described it as an isolated incident and admitted it had made a mistake, with a headline figure of about 240 million dollars worth of tokens involved. Other outlets cited around 212 million dollars. The gap exists because the minted value at one price differs from what could actually be sold before the price moved.
A day later, reports said Gala recovered about 22 million dollars of crypto the attacker had obtained. That was a partial recovery, not a full one.
Why this matters beyond the headline numbers:
- Mint permissions. The incident showed that a single compromised or misconfigured permission could create tokens at scale. Tokens with an open or poorly guarded mint function are inherently riskier.
- Dilution risk. Minting creates supply without anyone paying for it. If minted tokens are sold, buyers on the other side take on the loss.
- Response quality. Public admission, fast communication and partial recovery are better than silence, but they do not undo the exposure.
This was an exploit by an outside party, not a rug pull by the team. That is an important distinction in tone and in risk type. The practical takeaway is that holders carry smart contract and key management risk, even when the team is acting in good faith.
For the project's current security status, look for post-incident reports, audit updates and any change to who holds mint authority.
Why do so many people call GALA a scam?
Community threads and forum posts often call GALA a scam. One popular complaint is that the tokenomics never hid how the token worked: new tokens are issued and sold with no strong mechanism to support the price. Others argue the coin lacks core value and will eventually cause losses.
These are opinions, and they are worth reading as a signal of sentiment rather than as proof. But the underlying critique has substance that you can test yourself:
- Is supply fixed, capped or inflationary? Ongoing emission puts steady sell pressure on a token.
- Where does demand come from? If most demand is speculative rather than from using the games, prices depend on sentiment.
- Who can create new tokens? The 2024 exploit made this question concrete.
- How are rewards distributed? Node rewards and player earnings can become sell pressure if recipients cash out regularly.
Many gaming tokens share these features. A token can be badly designed without being a scam, and it can be well marketed without being safe. The word 'scam' in posts is often shorthand for 'I lost money and feel misled'.
If you want to judge a token on its merits, read the official tokenomics documents, check supply on a block explorer and compare the claimed use cases with actual on-chain activity. Treat anonymous posts, positive or negative, as leads to verify, not conclusions. Personal accounts on forums cannot be checked, and some promote competing projects.
Scam, hack or governance failure: how do you tell the difference?
Three different failure types get lumped under 'scam'. Telling them apart helps you decide how much risk you are taking and what recourse might exist.
| Type | What it means | Gala example | Typical signs |
|---|---|---|---|
| Scam or rug pull | Deliberate deception to take funds | None proven in sources reviewed | Anonymous team, hidden mint rights, liquidity removed, copied branding |
| Exploit or hack | An outside party abuses a flaw or stolen keys | May 2024 mint of 5 billion GALA | Sudden supply change, abnormal transfers, team admits incident |
| Governance failure | Insiders fight or mismanage control | 2023 founder lawsuits | Disputed token holdings, unclear control, delayed announcements |
Why this matters:
- Recourse differs. Fraud may lead to criminal or civil action. Hacks may lead to partial recovery. Governance disputes lead to court cases that take time.
- Prevention differs. You avoid scams by checking the team and contracts. You reduce hack exposure with audits and permission limits. You reduce governance risk by looking at who controls treasuries.
- Language matters. Calling an exploit a scam can spread false claims and make real scam warnings less credible.
A project can suffer more than one at once, and a poorly run project can invite all three. The safest assumption for any gaming token is that each failure type is possible and sizing your position accordingly.
How do you spot fake or lookalike game tokens?
Lookalike tokens are a common problem around well-known game brands. Scammers copy a name such as Town, Gala or a game title, create a token and try to attract buyers or trick wallets into interacting with it. A token named after a real game is not evidence that the game's team issued it.
Signs a token may be fake:
- It arrived unprompted. Unrequested tokens in your wallet are usually bait. Approving or swapping them can trigger a malicious contract.
- The contract address does not match official sources. Names and tickers are not unique on a blockchain. Only the contract address identifies a token.
- No presence inside the official game or wallet. Real in-game tokens are integrated into the product.
- Thin or concentrated liquidity. A few wallets hold most of the supply, or the liquidity pool is tiny.
- Urgent messaging. Direct messages or ads pushing you to buy or claim now.
- Sell restrictions. Some scam tokens let you buy but block selling.
A defensive routine:
- Find the contract address from the game's official site or in-app wallet, not from social media replies.
- Open it on a block explorer and check the creation date, holder list and any mint or owner functions.
- Never sign approvals for tokens you did not seek out.
- Use a separate wallet with small balances for experiments.
- Revoke old token approvals regularly using an approvals checker.
If a token looks suspicious, do not interact with it. Ignoring it costs nothing, while connecting your wallet can.
What should you check before holding a gaming token?
Before buying or holding any game token, run through a short list. None of it guarantees safety, but it removes many of the most common traps.
Team and control
- Are the founders public and on good terms? Disputes over large balances are a warning.
- Who holds admin keys, and is control spread across multiple parties?
Token design
- Is there a fixed or capped supply, or ongoing issuance?
- Can the contract mint new tokens, and who can trigger that?
- Are team and investor tokens vested and locked? Lock and vesting tools such as Team Finance and Streamflow are used by projects to make allocations visible on-chain.
Security
- Has the contract been audited by a recognized firm, and are reports public? Firms such as Sherlock publish audits and run contests.
- Has the project had past incidents, and how did it communicate?
Use and demand
- Does the token have a real function inside games, or is it mainly traded?
- Can you find active players, not just traders?
Personal limits
- Only use money you can afford to lose.
- Avoid leverage on small gaming tokens.
- Keep records for tax reporting in your country.
If a game's mechanics resemble gambling, such as paid loot boxes or chance-based rewards, check local laws and age rules. Participants generally must be 18 or older, and rules vary by country. Do not try to bypass regional restrictions or identity checks.
What can you do now if you hold GALA or a Town-named token?
If you hold GALA or a Town-named token today, a few steps help you make a calm decision.
- Confirm what you actually hold. Open your wallet on a block explorer and note the token contract addresses. Compare them to the addresses published by the game's official channels.
- Review approvals. Use an approvals checker to see which contracts can move your tokens, and revoke any you do not recognize.
- Check current status. Look for the latest official announcements, security reports and legal news. Public information here, such as lawsuit outcomes and post-exploit changes, may have moved since the sources we reviewed.
- Decide your exposure. If one token is a large part of your holdings, consider whether that matches your risk tolerance.
- Choose where to trade carefully. Larger exchanges such as OKX, Bitget or Bitvavo (for European users) list different assets and have different regional availability. Listing is not an endorsement, and availability depends on your location.
- Document everything. Save transaction records. If you were affected by a fake token or phishing, keep screenshots and report it to the platform and to local authorities.
If you suspect you interacted with a malicious contract, move remaining assets to a new wallet and revoke approvals from the old one. Do not respond to anyone offering recovery services for a fee, since those are a common follow-up scam.
Gala's story is a useful case study: a successful product can still carry token-level risks. Judge the game and the token separately.
Frequently asked questions
Was there a proven 'Town coin' scam at Gala Games?
No source we reviewed documents a specific proven scam involving a Town token. The documented problems are a 2023 founder dispute and a May 2024 exploit that minted GALA. If you see a token called Town or similar, treat it as unverified until you check the contract address inside the official game or wallet.
Did Gala Games get hacked?
Gala Games described the May 2024 incident as an isolated event and acknowledged it had made a mistake. Reports said an attacker minted 5 billion GALA and that the company later recovered part of what was taken, with figures around 22 million dollars cited. Reported dollar totals differ between outlets because minted value and value actually sold are different numbers.
Is GALA a scam?
Reddit and forum posts calling GALA a scam are opinion, mostly about token supply and tokenomics. The documented events are a founder lawsuit dispute, a token replacement that raised doubts and an exploit. None of those alone proves fraud, but together they are legitimate reasons to treat the token as high risk.
How can I check whether a game token is real?
Verify the contract address from the project's official channels, check that the token appears in the official game or wallet, and read the token's holder distribution and mint permissions on a block explorer. Be cautious of tokens that appeared in your wallet unprompted, since those are often airdrop bait.
Are blockchain game tokens safe to hold?
Not necessarily, but they deserve extra scrutiny. Weigh the reputation of the team, whether contracts are audited, how supply is controlled and whether the token has real use. Never hold more than you can afford to lose, and consult the laws in your area if tokens are tied to gambling-style mechanics. Players must be 18 or older in most jurisdictions.
Mentioned in this guide
dApps in this guide
Team Finance is a non-custodial platform where token projects create tokens, lock liquidity and team tokens, set up vesting, run staking pools and airdrops.
Streamflow is a Solana-focused platform for on-chain token vesting, airdrops, staking and locks, aimed at token teams, DAOs and developers.
Sherlock is a Web3 security firm offering audits, contests, AI review and bug bounties for onchain teams, formerly known for DeFi coverage.
OKX is a major centralized crypto exchange for spot and derivatives trading, earn products and a Web3 wallet, with its own OKB token.
Bitvavo is an Amsterdam-based, MiCA-authorized crypto exchange offering 400+ assets, euro deposits, staking and leverage trading for European users.
Bitget is a centralized exchange for crypto spot and futures that also offers tokenized stocks, commodities and forex in one account, for active traders.
Save, formerly Solend, is a Solana lending and borrowing protocol where users earn interest on deposits or borrow against collateral.
Gala Games is a play-to-earn blockchain gaming ecosystem with the GALA token, aimed at players who want to earn in-game assets.
GalaConnect is a wallet-based gateway for bridging, transferring, wrapping, and managing assets across GalaChain and other supported networks.
Keep reading
Related guides
Security and scams · How-to
8 Ways to Check if a Token Is a Scam Before You Buy
Anyone can create a token in minutes, so a name, logo or busy chat proves nothing. These eight checks help you catch the most common traps before you put money in.
Security and scams · Explainer
Squid Game Token Scam: How the Rug Pull Worked and Its Lessons
The Squid Game token (SQUID) rose by several thousand percent in days in late 2021, then collapsed to near zero in minutes while buyers found they could not sell. This guide explains how the scheme worked, which warning signs were visible, and the checks that apply to the next themed token.
Security and scams · How-to
How to Find Memecoins Early and Detect Token Scams
Memecoins can multiply or vanish within hours, and most new launches are built to take money rather than hold value. This guide covers how to find new tokens, run basic safety checks and avoid the most common scams.
Airdrop and rewards · Airdrop guide
Gala Games May Mayhem Prizes: What Happened and What to Check
Gala Games ran a May Mayhem event that offered token and NFT prizes to players. This guide explains what the event was, what public reporting confirm about it and its prize figure, how the 2024 GALA exploit affected the ecosystem, and how to check current rewards safely.
Security and scams · Explainer
Harmony Horizon Bridge Hack: How $100M Was Lost and Why It Matters
In June 2022 the Horizon Bridge linking Harmony to other chains lost about $100 million after attackers gained control of enough signing keys. This guide explains how the attack worked in general terms, why its design mattered, and which habits lower your risk when moving funds across chains.
Security and scams · Explainer
Frosties NFT Rug Pull: How Victims Can Pursue Justice
The Frosties NFT collection vanished in early 2022 after buyers put in roughly $1.1 to $1.3 million, and federal charges followed. This guide explains what happened, which legal and practical routes a defrauded community can use, and what evidence to preserve now.
Security and scams · Explainer
Harmony Horizon Bridge Hack 2022: What Happened and What It Teaches
In June 2022 attackers drained roughly $100 million from the Horizon bridge run by Harmony, and Harmony offered a $1 million bounty for the funds to be returned. This guide explains what happened, why the offer went unanswered, how the money was moved, and what bridge users can check today.
Security and scams · Explainer
Floyd Mayweather Crypto and NFT Promotions: Spotting Scams in 2026
Floyd Mayweather has been linked to several crypto and token promotions that drew fraud claims, and reports now describe a new NFT-related pitch. This guide explains the pattern behind celebrity crypto promotions, what past cases showed, and how to check an offer before you send money or connect a wallet.