In a brazen cyber heist, the peer-to-peer trading platform NFT Trader fell victim to a sophisticated hack. It resulted in the theft of millions of dollars worth of high-value Non-Fungible Tokens (NFTs).
Among the stolen digital assets were rare tokens from prominent collections like Bored Ape and Mutant Ape Yacht Club, World of Women NFTs, VeeFriends, and Art Blocks.
Hacker Steals Expensive NFTs
NFT Trader confirmed the attack, revealing that “old smart contracts” were the hackers’ entry point. The company advised users to revoke any permissions previously granted to these smart contracts.
Reportedly, the attacks ceased after NFT Trader updated its contracts to mend a reentrancy vulnerability.
“There was a malicious code execution from a third party to our two older smart contracts. However, we’ve implemented all necessary measures to prevent any such incidents in the future. It’s highly advisable to use revoke(.)cash or similar tools after completing a deal on any platform for added security and use cold wallet as intended, without the interaction (or signature) with any smart contract.,” NFT Trader said.
In a bold move, the main attacker left a public message on the blockchain. He blamed another user for the NFT exploit and claimed the attack was to “pick up leftover trash.” The hacker even proposed returning the tokens for a ransom – 3 ETH per Bored Ape and 0.6 ETH per Mutant Ape.
Read more: Identifying & Exploring Risk on DeFi Lending Protocols
This incident saw a series of perplexing actions from the attacker, including returning one Bored Ape with an additional 31 ETH to a user and returning certain staked Bored Apes to their owners, albeit keeping the ApeCoin rewards.
“I’m a good person, the value of these NFTs is enough for a person to live a free life, but I don’t care about that… My technical skills are limited, I can’t g
Go to Source to See Full Article
Author: Bary Rahma