DeezNutz_404 Hack

Deez Nutz Protocol exploited via flash loan attack, resulting in a loss of $174,086 USD worth 58.65 WETH.

On February 21, 2024, Deez Nutz, a protocol focused on NFTs, Tokenization, and DeFi, experienced an exploit due to a contract vulnerability and a flash loan attack. The attacker, identified as bigbrainchad.eth, targeted the erc404 series of tokens from DeezNutz_404 on Ethereum, causing an estimated total loss of around $170,000. The exploit involved a bug in the code that allowed the attacker to mint infinite tokens and steal approximately 58.65 ETH.

The root cause was an incorrect calculation when transferring tokens to self, which enabled the attacker to mint infinite tokens and sell them.The stolen funds still remaining attacker's address as of Feb 24,2024.

Attacker address:

https://etherscan.io/address/0xd215FFaf…af0Dfd

Funds Holder as of Feb 24, 2024:

https://etherscan.io/address/0xed65b99E…164c9A

Malicious transaction:

https://etherscan.io/tx/0xbeefd8fa…ec2d61

Malicious contract:

https://etherscan.io/address/0xd129D8C1…c84ecD