Source code from Witcher 3 and Cyberpunk 2077 may have been sold at auction

The source code of Witcher 3 and Cyberpunk 2077 has reportedly been successfully auctioned to an as yet unknown party. Two days ago the source code of card game Gwent leaked online, the source code for the other games was put up for auction. It now appears to be closed.

Stolen data from game developer CD Projekt Red that was looted in a ransomware attack last week has appeared online and was auctioned. Data security platform vx-underground reports this on Twitter . At first it seemed to be only the source code of the card game Gwent, but that turned out to be a teaser. Source codes from The Witcher 3, Thronebreaker and Cyberpunk 2077, plus alleged internal documents from CD Projekt Red appeared in an online auction not much later. According to vx-underground, that auction has been successfully completed and the source code of both games has been sold.

Upon disclosure of the ransomware attack , CD Projekt Red displayed a threatening letter stating that the attackers had looted source code for Cyberpunk 2077, Witcher 3, Gwent, and the unreleased version of The Witcher 3. The attackers write that CD Project Red has 48 hours to respond to the attack. The Polish company has indicated that it will not negotiate with the attackers or pay a ransom.

Ransome-note CD Projekt Red

Now it appears that the attackers subsequently offered the source code by auction on a hacker forum. Images shared by vx-underground on Twitter show some of Gwent’s leaked source code and a screenshot of the auction . The starting bid of the auction was one million dollars, for 7 million dollars the data could be bought immediately.

Not much later , vx-underground reported that the auction was closed, because a deal was closed outside the auction. It is unknown who bought the data and what this person wants to do with the data. It is also not known for how much the data was ultimately purchased. The sale has been confirmed by KELA, a security company that specializes in monitoring the darknet.