NFT Trader Exploit: Hackers Pilfer Millions in NFTs, Ranging from Apes to Art Blocks

NFT Trader Exploit: Hackers Pilfer Millions in NFTs, Ranging from Apes to Art Blocks

Millions of dollars worth of high-value NFTs, including rare Bored Ape and Mutant Ape Yacht Club tokens, World of Women NFTs, VeeFriends, Art Blocks, and more, were stolen in a significant breach of the peer-to-peer trading platform NFT Trader earlier today.

Hackers Pilfer Millions in NFTs, Ranging from Apes to Art Blocks

The company acknowledged in a post on X that “old smart contracts” had been targeted and advised users to revoke any permissions previously granted to the smart contracts. User foobar on X has asserted that the attacks concluded after NFT Trader addressed a reentrancy vulnerability by updating its smart contracts.

The apparent primary attacker left a public message on the blockchain, attributing the NFT exploit to another user and justifying the attack as a means to “pick up residual garbage.” The attacker offered to return tokens to victims upon receiving a ransom of 3 ETH per Bored Ape and 0.6 ETH per Mutant Ape. The attacker also executed a series of perplexing actions, refunding one Bored Ape along with 31 ETH to a user, returning certain staked Bored Apes to their owners while retaining the ApeCoin rewards.

In addition to the main hacker, there have been reports of secondary hacks siphoning tokens such as Cool Cats and Squiggles from users’ wallets. 

Source: The Block

Also Read, Shiba Inu Team Assures SHIB Burns Are Proceeding as Planned, Urges Patience Amidst Delay