- Amount Lost: $145,043.00
- Funds Returned: $0.00
- Category: NFT
- Date: 2023-5-14
Quick Summary
LandNFT project experienced an exitscam. The scammer allowed to create of 200 NFTs that were sold for 145,043 $USD.
Details of the Exploit
LandNFT is an NFT project on Binance Smart Chain (BSC). An investigation revealed that some miner addresses had unlimited ability to mint NFTs, including one with the address: 0x2e599883715d2f92468fa5ae3f9aab4e930e3ac7. The attack started by calling the contract owned by this miner's address to mint 200 NTFs without any restrictions or permissions.
Next, the scammer called another function from another contract using these newly created tokens to swap them for $XQJ tokens at a rate of 200 $XQJ per token. Finally, they exchanged all accumulated $XQJ tokens for 145,043 $USD. The stolen funds currently remain at the scammers original address.
Block Data Reference
Scammer Address:
https://bscscan.com/address/0x96b89c2560bcc43c342c12ba9c33dab7eb571a90
Mint Transaction:
https://bscscan.com/tx/0xe4db1550e3aa78a05e93bfd8fbe21b6eba5cce50dc06688949ab479ebed18048
Swap Transaction Example:
https://bscscan.com/tx/0x7ab211f9ed4d026a484ac786a59d9b3001939354c27500deda6ec3d248f4d180
Proof Links: