Witcher 3 and Cyberpunk 2077 source code may have been sold at auction

The source code of Witcher 3 and Cyberpunk 2077 has reportedly been successfully auctioned off to an as-yet-unknown party. Two days ago, the source code of card game Gwent leaked online, the source code for the other games was put up for auction. It appears to be closed now.

Stolen data from game developer CD Projekt Red that was captured in a ransomware attack last week has appeared online and is up for auction. That reports data security platform vx-underground on Twitter. At first it seemed to only be the source code of the card game Gwent, but that turned out to be a teaser. Source codes of The Witcher 3, Thronebreaker and Cyberpunk 2077, plus alleged internal documents from CD Projekt Red, appeared in an online auction not much later. According to vx-underground, that auction has been successfully completed and the source code of both games has been sold.

When announcing the ransomware attack, CD Projekt Red released a threatening letter stating that the attackers had stolen source code from Cyberpunk 2077, Witcher 3, Gwent, and the unreleased version of The Witcher 3. The attackers write that CD Project Red has 48 hours to respond to the attack. The Polish company has indicated that it will not negotiate with the attackers and will not pay a ransom.

Now it appears that the attackers subsequently auctioned the source code on a hacker forum. In images vx-underground shares on Twitter,, some of Gwent’s leaked source code to see and a screenshot of the auction. The starting bid of the auction was one million dollars, for 7 million dollars the data could be bought immediately. Not much later reported vx-underground that the auction was closed because a deal was made outside the auction. It is unknown who bought the data and what this person wants to do with the data. It is also not known for how much the data was ultimately purchased. Sales has been confirmed by KELA, a security company that specializes in monitoring the darknet.