NFT trader hacked, millions of dollars in NFT stolen
Peer-to-peer trading platform NFT Trader suffered a security breach on December 16, which allowed hackers to steal millions of dollars worth of non-vulnerable tokens (NFTs).
NFT trader X (formerly Twitter) confirmed the incident and said the attack targeted old smart contracts and urged users to cancel delegation to two addresses.
Among the NFTs stolen were at least 13 Mutant Up Yacht Club and 37 Bored Up tokens, as well as VeeFriends and World of Women NFTs, resulting in losses of up to $3 million, according to Revoke.cash.
Rumors and misinformation were heard on social media following the hack. Additionally, it is not yet clear how many hackers have exploited the security flaw. In a public message, one of the attackers made the first exploit to another user. “I came here to pick up leftover trash,” they wrote, demanding a ransom to return the NFTs.
“At first I came here as usual to pick up residual garbage. At first I thought I could only get TOKEN, but finally I found out I can get NFT.” […] I am a good person, the value of these nfts is enough for a person to live a free life, but I don't care about that. I'd rather pick up the leftovers,” said one of the attackers.
The attacker then claimed to have limited technical skills, and offered to pay victims 10% in Ether (ETH) in exchange for NFTs. “My technical skills are limited, I can't find all affected nfts at once, and it's costing me a lot of energy and time. […] “If you want the monkey nft back, you should pay me a bonus that I deserve,” they wrote.
In another unusual development, one of the victims claimed that the attacker returned a rare NFT with 31 ETH worth nearly $70,680 at the time of writing. “And now the hacker sent me 31 eth? What in the world is going on. Is this real life?” the victim wrote on X.
Magazine: NFT Creator: J1mmy.eth once released 420 Bored Monkeys… and had $150M worth of NFTs
