Millions of dollars in NFTs were vulnerable until a whitehat hacker
@0xQuit took it upon himself to rescue them!
Here is the story:
A massive hack just took place via the
@MagicEden NFT marketplace
A bug in an old smart contract used by the marketplace, allowed hackers to use an old wallet approval from users to steal their NFTs and approved balances!
The marketplace itself was already gone, but the wallet approvals users granted years ago were still sitting onchain
That meant NFTs could be pulled from those wallets without the owner signing anything new
After a few initial reports, the scale started to become more obvious, this was not a one-off theft
It was an open door across a huge set of leftover approvals
On the newer version of the contract an emergency pause could be triggered but this was not possible on the older version of the contract
@0xQuit quickly realized this and started going to work in a race against the malicious hackers
The goal was simple, steal the vulnerable assets and secure them before the malicious hackers could do so
By morning, the whitehat managed to secure more than $5.7M in NFTs
Unfortunately the malicious hackers realized not only NFTs but also approved WETH and USDC balances could be stolen
The total reported theft (beyond the rescued NFTs) has been estimated at $2.8M+ but would have been significantly bigger without the hero whitehat hacker coming to the rescue!