NFT trader stolen monkeys returned after bonus payment
All Bored Ape Yacht Club (BAYC) and Mutant Ape Yacht Club (MAYC) stolen tokens (NFTs) from the peer-to-peer trading platform have been returned after bonus payments.
About $3 million worth of NFTs were stolen in the December 16 hack. According to official messages, the attacker made the first exploit to another user. “I'm here to take the leftovers,” they wrote, demanding a ransom to return the NFTs.
“If you want to return these NFTs, you have to pay 120 ETH […] And then I send you an NFT, it's as simple as that, and I never lie, trust me […]” says one of the messages.
A community initiative led by Boring Security – a non-profit Web3 security project funded by ApeCoin – paid a 120 Ether (ETH) bounty worth $267,000 as of this writing and recovered all assets in less than 24 hours.
“The 36 BAYC and 18 MAYC that were exploited are now in our hands. We sent her [the hacker] 10% of the floor price of the collection is a bonus,” wrote the Boring Security team on X (formerly Twitter).
@BoringSecDAO Congrats on getting those monkeys back.
good job. ✅ @BoredApeYC pic.twitter.com/brVGQ58Sg2
— realniceguy.eth ❄️ (@realniceguy_SRH) December 17, 2023
The award was given by Greg Solano, founder of Yoga Labs. The company is the creator of both sets of NFTs and backed transactions to recover the tokens and return them to their original owners free of charge.
According to “Fubar”, the anonymous founder and developer of Delegates, the vulnerability introduced 11 days ago allowed unauthorized transfers of NFTs from their owners due to their previously granted trading licenses after a smart contract update allowed abuse of the multi-call feature.
The incident affected users of two old contracts 0xc310e760778ecbca4c65b6c559874757a4c4ece0 and 0x13d8faF4A690f5AE52E2D2D2C52938d1970.52938d1167.52938d11670.12938d7B52E52E2 D2C52938d1167 If approvals are not revoked, NFTs can be stolen again, Fubar said. Shortly after the attack was discovered, the developer helped shut down the NFT trading group.
Magazine: NFT Creator: J1mmy.eth once released 420 Bored Monkeys… and had $150M worth of NFTs
