Skip to content

DappsAtlas index · 14,224 dApps

DappsAtlas

Security and scams · Explainer

Gala Games and the 'Town Coin' Scam Claims: What's Verified

Gala Games grew into one of the biggest blockchain gaming brands, then drew headlines for a founder feud, a 2024 token-minting exploit and loud scam accusations. This guide separates what is documented from what is opinion, including the 'Town coin' claim, and shows how to protect yourself.

By the DappsAtlas editorial team · Updated

Illustration for Gala Games and the 'Town Coin' Scam Claims: What's Verified

How did Gala Games become a major blockchain gaming brand?

Gala Games started as a platform for blockchain games where players own in-game items as NFTs and earn or spend GALA. It built a large community by giving away node licenses, running several game titles and promoting an ecosystem of games rather than a single hit.

The model had three parts worth understanding:

  1. A shared token. GALA is used across the platform for rewards, purchases and other in-game functions.
  2. Node operators. People who bought licenses ran software that supported the network and received GALA rewards over time.
  3. A game portfolio. Titles such as Town Star, a farming and city-building game, helped onboard players who cared more about gameplay than trading.

That reach is why the project's problems drew so much attention. A token with a big, active community has many holders who feel directly affected by any security or governance event. It also means many people hold it because of the game, not because they studied the token's supply and controls.

The success was real in terms of audience and brand recognition. But a popular game does not guarantee a safe token. Supply schedules, who can mint tokens and who controls the contracts are separate questions, and they are the ones that mattered in the 2023 and 2024 episodes covered below.

For current prices, market capitalization and holder counts, check a market data site and the project's own announcements, since those numbers change daily and any figure printed here would go stale.

What happened in the 2023 founder dispute?

In September 2023, reports described a public fight between Gala's two co-founders. Each filed lawsuits against the other, with accusations including coin theft, market manipulation and misuse of company funds. One report put the value of tokens at issue at roughly 130 million dollars.

For holders, the dispute created uncertainty about who controlled what. Coverage at the time noted that the GALA price fell by more than a quarter as players and investors worried about both the founders' conflict and doubts around a token replacement. Token replacement means moving holders from an older token contract to a new one, which normally requires trust that the team controls the process correctly.

A few points to keep straight:

  • Lawsuit allegations are claims, not findings. Courts decide outcomes, and settlements can end cases without a ruling.
  • A founder dispute is a governance risk. It does not prove that the token is fraudulent.
  • Even so, a conflict over who holds large token balances shows that centralized control existed. That is a risk in itself.

We did not find a definitive outcome in the sources reviewed, so do not rely on this article for the current legal status. Check recent court reporting and Gala's official statements for the latest.

The lesson for any project: when founders hold or control large token balances, the project's stability depends on their relationship. Look for vesting schedules, multi-party control of treasuries and public lockups before assuming that large allocations are safe.

What happened in the May 2024 GALA mint exploit?

On a Monday in May 2024, an attacker used an exploit to mint 5 billion GALA tokens. Decrypt reported that Gala described it as an isolated incident and admitted it had made a mistake, with a headline figure of about 240 million dollars worth of tokens involved. Other outlets cited around 212 million dollars. The gap exists because the minted value at one price differs from what could actually be sold before the price moved.

A day later, reports said Gala recovered about 22 million dollars of crypto the attacker had obtained. That was a partial recovery, not a full one.

Why this matters beyond the headline numbers:

  • Mint permissions. The incident showed that a single compromised or misconfigured permission could create tokens at scale. Tokens with an open or poorly guarded mint function are inherently riskier.
  • Dilution risk. Minting creates supply without anyone paying for it. If minted tokens are sold, buyers on the other side take on the loss.
  • Response quality. Public admission, fast communication and partial recovery are better than silence, but they do not undo the exposure.

This was an exploit by an outside party, not a rug pull by the team. That is an important distinction in tone and in risk type. The practical takeaway is that holders carry smart contract and key management risk, even when the team is acting in good faith.

For the project's current security status, look for post-incident reports, audit updates and any change to who holds mint authority.

Why do so many people call GALA a scam?

Community threads and forum posts often call GALA a scam. One popular complaint is that the tokenomics never hid how the token worked: new tokens are issued and sold with no strong mechanism to support the price. Others argue the coin lacks core value and will eventually cause losses.

These are opinions, and they are worth reading as a signal of sentiment rather than as proof. But the underlying critique has substance that you can test yourself:

  • Is supply fixed, capped or inflationary? Ongoing emission puts steady sell pressure on a token.
  • Where does demand come from? If most demand is speculative rather than from using the games, prices depend on sentiment.
  • Who can create new tokens? The 2024 exploit made this question concrete.
  • How are rewards distributed? Node rewards and player earnings can become sell pressure if recipients cash out regularly.

Many gaming tokens share these features. A token can be badly designed without being a scam, and it can be well marketed without being safe. The word 'scam' in posts is often shorthand for 'I lost money and feel misled'.

If you want to judge a token on its merits, read the official tokenomics documents, check supply on a block explorer and compare the claimed use cases with actual on-chain activity. Treat anonymous posts, positive or negative, as leads to verify, not conclusions. Personal accounts on forums cannot be checked, and some promote competing projects.

Scam, hack or governance failure: how do you tell the difference?

Three different failure types get lumped under 'scam'. Telling them apart helps you decide how much risk you are taking and what recourse might exist.

Type What it means Gala example Typical signs
Scam or rug pull Deliberate deception to take funds None proven in sources reviewed Anonymous team, hidden mint rights, liquidity removed, copied branding
Exploit or hack An outside party abuses a flaw or stolen keys May 2024 mint of 5 billion GALA Sudden supply change, abnormal transfers, team admits incident
Governance failure Insiders fight or mismanage control 2023 founder lawsuits Disputed token holdings, unclear control, delayed announcements

Why this matters:

  • Recourse differs. Fraud may lead to criminal or civil action. Hacks may lead to partial recovery. Governance disputes lead to court cases that take time.
  • Prevention differs. You avoid scams by checking the team and contracts. You reduce hack exposure with audits and permission limits. You reduce governance risk by looking at who controls treasuries.
  • Language matters. Calling an exploit a scam can spread false claims and make real scam warnings less credible.

A project can suffer more than one at once, and a poorly run project can invite all three. The safest assumption for any gaming token is that each failure type is possible and sizing your position accordingly.

How do you spot fake or lookalike game tokens?

Lookalike tokens are a common problem around well-known game brands. Scammers copy a name such as Town, Gala or a game title, create a token and try to attract buyers or trick wallets into interacting with it. A token named after a real game is not evidence that the game's team issued it.

Signs a token may be fake:

  • It arrived unprompted. Unrequested tokens in your wallet are usually bait. Approving or swapping them can trigger a malicious contract.
  • The contract address does not match official sources. Names and tickers are not unique on a blockchain. Only the contract address identifies a token.
  • No presence inside the official game or wallet. Real in-game tokens are integrated into the product.
  • Thin or concentrated liquidity. A few wallets hold most of the supply, or the liquidity pool is tiny.
  • Urgent messaging. Direct messages or ads pushing you to buy or claim now.
  • Sell restrictions. Some scam tokens let you buy but block selling.

A defensive routine:

  1. Find the contract address from the game's official site or in-app wallet, not from social media replies.
  2. Open it on a block explorer and check the creation date, holder list and any mint or owner functions.
  3. Never sign approvals for tokens you did not seek out.
  4. Use a separate wallet with small balances for experiments.
  5. Revoke old token approvals regularly using an approvals checker.

If a token looks suspicious, do not interact with it. Ignoring it costs nothing, while connecting your wallet can.

What should you check before holding a gaming token?

Before buying or holding any game token, run through a short list. None of it guarantees safety, but it removes many of the most common traps.

Team and control

  • Are the founders public and on good terms? Disputes over large balances are a warning.
  • Who holds admin keys, and is control spread across multiple parties?

Token design

  • Is there a fixed or capped supply, or ongoing issuance?
  • Can the contract mint new tokens, and who can trigger that?
  • Are team and investor tokens vested and locked? Lock and vesting tools such as Team Finance and Streamflow are used by projects to make allocations visible on-chain.

Security

  • Has the contract been audited by a recognized firm, and are reports public? Firms such as Sherlock publish audits and run contests.
  • Has the project had past incidents, and how did it communicate?

Use and demand

  • Does the token have a real function inside games, or is it mainly traded?
  • Can you find active players, not just traders?

Personal limits

  • Only use money you can afford to lose.
  • Avoid leverage on small gaming tokens.
  • Keep records for tax reporting in your country.

If a game's mechanics resemble gambling, such as paid loot boxes or chance-based rewards, check local laws and age rules. Participants generally must be 18 or older, and rules vary by country. Do not try to bypass regional restrictions or identity checks.

What can you do now if you hold GALA or a Town-named token?

If you hold GALA or a Town-named token today, a few steps help you make a calm decision.

  1. Confirm what you actually hold. Open your wallet on a block explorer and note the token contract addresses. Compare them to the addresses published by the game's official channels.
  2. Review approvals. Use an approvals checker to see which contracts can move your tokens, and revoke any you do not recognize.
  3. Check current status. Look for the latest official announcements, security reports and legal news. Public information here, such as lawsuit outcomes and post-exploit changes, may have moved since the sources we reviewed.
  4. Decide your exposure. If one token is a large part of your holdings, consider whether that matches your risk tolerance.
  5. Choose where to trade carefully. Larger exchanges such as OKX, Bitget or Bitvavo (for European users) list different assets and have different regional availability. Listing is not an endorsement, and availability depends on your location.
  6. Document everything. Save transaction records. If you were affected by a fake token or phishing, keep screenshots and report it to the platform and to local authorities.

If you suspect you interacted with a malicious contract, move remaining assets to a new wallet and revoke approvals from the old one. Do not respond to anyone offering recovery services for a fee, since those are a common follow-up scam.

Gala's story is a useful case study: a successful product can still carry token-level risks. Judge the game and the token separately.

Frequently asked questions

Was there a proven 'Town coin' scam at Gala Games?

No source we reviewed documents a specific proven scam involving a Town token. The documented problems are a 2023 founder dispute and a May 2024 exploit that minted GALA. If you see a token called Town or similar, treat it as unverified until you check the contract address inside the official game or wallet.

Did Gala Games get hacked?

Gala Games described the May 2024 incident as an isolated event and acknowledged it had made a mistake. Reports said an attacker minted 5 billion GALA and that the company later recovered part of what was taken, with figures around 22 million dollars cited. Reported dollar totals differ between outlets because minted value and value actually sold are different numbers.

Is GALA a scam?

Reddit and forum posts calling GALA a scam are opinion, mostly about token supply and tokenomics. The documented events are a founder lawsuit dispute, a token replacement that raised doubts and an exploit. None of those alone proves fraud, but together they are legitimate reasons to treat the token as high risk.

How can I check whether a game token is real?

Verify the contract address from the project's official channels, check that the token appears in the official game or wallet, and read the token's holder distribution and mint permissions on a block explorer. Be cautious of tokens that appeared in your wallet unprompted, since those are often airdrop bait.

Are blockchain game tokens safe to hold?

Not necessarily, but they deserve extra scrutiny. Weigh the reputation of the team, whether contracts are audited, how supply is controlled and whether the token has real use. Never hold more than you can afford to lose, and consult the laws in your area if tokens are tied to gambling-style mechanics. Players must be 18 or older in most jurisdictions.

Mentioned in this guide

dApps in this guide

Team Finance logo

Team Finance

Token Locker

Score 7.8 out of 10

Team Finance is a non-custodial platform where token projects create tokens, lock liquidity and team tokens, set up vesting, run staking pools and airdrops.

TVL $57.0M−1.5%Ethereum · BNB Chain · Base +18
Streamflow logo

Streamflow

Payments

Score 7.4 out of 10

Streamflow is a Solana-focused platform for on-chain token vesting, airdrops, staking and locks, aimed at token teams, DAOs and developers.

TVL $10.5M−4.7%Solana · Aptos · BNB Chain +3
Sherlock logo

Sherlock

Security

Score 7.4 out of 10

Sherlock is a Web3 security firm offering audits, contests, AI review and bug bounties for onchain teams, formerly known for DeFi coverage.

TVL $227K−0.7%Ethereum
OKX logo

OKX

Centralized Exchanges

Score 8.0 out of 10

OKX is a major centralized crypto exchange for spot and derivatives trading, earn products and a Web3 wallet, with its own OKB token.

TVL $28.4B+0.1%Ethereum · Bitcoin · X Layer +21
Bitvavo logo

Bitvavo

Centralized Exchanges

Score 7.9 out of 10

Bitvavo is an Amsterdam-based, MiCA-authorized crypto exchange offering 400+ assets, euro deposits, staking and leverage trading for European users.

TVL $319M−11.3%Ethereum · Bitcoin · Solana +9
Bitget logo

Bitget

Centralized Exchanges

Score 7.6 out of 10

Bitget is a centralized exchange for crypto spot and futures that also offers tokenized stocks, commodities and forex in one account, for active traders.

TVL $5.93B+1.6%Bitcoin · Solana · Ethereum +68
Save logo

Save

Lending

Score 6.8 out of 10

Save, formerly Solend, is a Solana lending and borrowing protocol where users earn interest on deposits or borrow against collateral.

TVL $72.0M−6.1%Solana · Eclipse
Gala Games logo

Gala Games

Play-to-Earn Games

Score 4.0 out of 10

Gala Games is a play-to-earn blockchain gaming ecosystem with the GALA token, aimed at players who want to earn in-game assets.

Ethereum
Gala logo

Gala

Interface

Score 6.5 out of 10

GalaConnect is a wallet-based gateway for bridging, transferring, wrapping, and managing assets across GalaChain and other supported networks.

Ethereum · Solana · TON +1

Keep reading

Related guides

All security and scams guides

Security and scams · Explainer

Frosties NFT Rug Pull: How Victims Can Pursue Justice

The Frosties NFT collection vanished in early 2022 after buyers put in roughly $1.1 to $1.3 million, and federal charges followed. This guide explains what happened, which legal and practical routes a defrauded community can use, and what evidence to preserve now.