What happened
On May 17, 2021, malware compromised part of FinNexus' hardware and exposed the ownership key for the FNX token contract. The attacker transferred ownership, minted more than 323 million FNX, and sold the supply on centralized and decentralized exchanges, causing a price dump. FinNexus said its other contract-owner keys were safe and planned a token replacement snapshot.
How it happened
- Malware compromised hardware used by FinNexus.
- The attacker recovered the FNX token contract ownership key.
- The attacker transferred contract ownership and minted more than 323 million FNX.
- The minted tokens were sold on exchanges, causing a price dump.
Protocol details
Classification
Other / Key Compromise
Protocol Type
Options
Affected asset / contract
FNX
Implementation language
Solidity
Protocol links
Website
@Phoenix__PHX
Security review history
- PeckShield View report
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
