Skip to content

Latest commit

 

History

History
54 lines (22 loc) · 1.5 KB

NFT-Cloud.md

File metadata and controls

54 lines (22 loc) · 1.5 KB

NFT Cloud

NFT Cloud

  • Amount Lost: $85,330.00
  • Funds Returned: $0.00
  • Category: NFT,Token
  • Date: 2023-2-24

Quick Summary

NFT Cloud platform was exploited, which caused a loss of 85,330 $USD worth of $BNB.

Details of the Exploit

NFT Cloud is a Web3 platform for entrepreneurs and creators. The staking contract of the platform was exploited due to an indexing-related logic issue. The attacker was able to receive 100,000 $CLOUD tokens using a malicious contract with an unverified source code, and then drain the PancakeSwap liquidity pool. The token price dropped by more than 75% cause of an exploit. The total funds lost reached roughly 265 $BNB which is worth 85,300 $USD at the moment. All the stolen funds were transferred through TornadoCash.

Block Data Reference

Attacker address:

https://bscscan.com/address/0x16b904b61a5104e270521e759d27520bb97f1dd0

Malicious transaction:

https://bscscan.com/tx/0x4897b7fb241c72dc96d97ba4ad42c00654d47cb3961239f5088b878942b4d48d

Malicious contract:

https://bscscan.com/address/0x09845b8e7d94c559697bfa860cea69bbc7b0495f

Transfer transaction example:

https://bscscan.com/tx/0x49b8aa37ded9192deac81d251451072fd770caf8465b82675577e2d518dc04cb

Proof Links: