land Hack

LandNFT project experienced an exitscam. The scammer allowed to create of 200 NFTs that were sold for 145,043 $USD.

LandNFT is an NFT project on Binance Smart Chain (BSC). An investigation revealed that some miner addresses had unlimited ability to mint NFTs, including one with the address: 0x2e599883…0e3ac7. The attack started by calling the contract owned by this miner's address to mint 200 NTFs without any restrictions or permissions.

Next, the scammer called another function from another contract using these newly created tokens to swap them for $XQJ tokens at a rate of 200 $XQJ per token. Finally, they exchanged all accumulated $XQJ tokens for 145,043 $USD. The stolen funds currently remain at the scammers original address.

Scammer Address:

https://bscscan.com/address/0x96b89c25…571a90

Mint Transaction:

https://bscscan.com/tx/0xe4db1550…d18048

Swap Transaction Example:

https://bscscan.com/tx/0x7ab211f9…f4d180