- Amount Lost: $85,330.00
- Funds Returned: $0.00
- Category: NFT,Token
- Date: 2023-2-24
Quick Summary
NFT Cloud platform was exploited, which caused a loss of 85,330 $USD worth of $BNB.
Details of the Exploit
NFT Cloud is a Web3 platform for entrepreneurs and creators. The staking contract of the platform was exploited due to an indexing-related logic issue. The attacker was able to receive 100,000 $CLOUD tokens using a malicious contract with an unverified source code, and then drain the PancakeSwap liquidity pool. The token price dropped by more than 75% cause of an exploit. The total funds lost reached roughly 265 $BNB which is worth 85,300 $USD at the moment. All the stolen funds were transferred through TornadoCash.
Block Data Reference
Attacker address:
https://bscscan.com/address/0x16b904b61a5104e270521e759d27520bb97f1dd0
Malicious transaction:
https://bscscan.com/tx/0x4897b7fb241c72dc96d97ba4ad42c00654d47cb3961239f5088b878942b4d48d
Malicious contract:
https://bscscan.com/address/0x09845b8e7d94c559697bfa860cea69bbc7b0495f
Transfer transaction example:
https://bscscan.com/tx/0x49b8aa37ded9192deac81d251451072fd770caf8465b82675577e2d518dc04cb
Proof Links: