What happened
The attacker's address:
https://etherscan.io/address/0xEda50667…2D8113
On the Ethereum network, each token to be bridged has its own proxy Factory contract. The attacker was able to exploit the contract, minting tokens directly into different addresses, before reaccumulating them into the wallet from which the transactions were initially sent.
The attacker:
- called receive() function to the Factory minting contract
- dodged the sloppy auth check system using a new address as signature each tx
- paid 0.005 ETH chargeFee
- set to parameter to the desired address, which receives the minted volume
- repeated x times.
Using the NFT platform WilderWorld as an example, this is one of 40 repeated transactions, each of which produced 500,000 $WILD tokens.
These 20M WILD were subsequently sold for 650 WBNB, or little more than $200,000 USD, using PancakeSwap, essentially emptying the WILD/WBNB pool.
The example transaction:
https://bscscan.com/tx/0x83b4adaf…dff723
Projects which got harmed:
- Wilder Worlds
- Antimatter
- Optionroom
- Umbrella Blank
- Nord
- Razor
- Peri
- Unido
- Oro
- Vortex
- Blank
- Unifarm
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report chain-swap.medium.com
- report Post-mortem rekt.news
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.