DeezNutz_404 Hack

Deez Nutz Protocol exploited via flash loan attack, resulting in a loss of $174,086 USD worth 58.65 WETH.

On February 21, 2024, Deez Nutz, a protocol focused on NFTs, Tokenization, and DeFi, experienced an exploit due to a contract vulnerability and a flash loan attack. The attacker, identified as bigbrainchad.eth, targeted the erc404 series of tokens from DeezNutz_404 on Ethereum, causing an estimated total loss of around $170,000. The exploit involved a bug in the code that allowed the attacker to mint infinite tokens and steal approximately 58.65 ETH.

The root cause was an incorrect calculation when transferring tokens to self, which enabled the attacker to mint infinite tokens and sell them.The stolen funds still remaining attacker's address as of Feb 24,2024.

Attacker address:

Address 0xd215…0Dfd

Funds Holder as of Feb 24, 2024:

Address 0xed65…4c9A

Malicious transaction:

Tx 0xbeef…2d61

Malicious contract:

Address 0xd129…4ecD