What happened
LandNFT project experienced an exitscam. The scammer allowed to create of 200 NFTs that were sold for 145,043 $USD.
LandNFT is an NFT project on Binance Smart Chain (BSC). An investigation revealed that some miner addresses had unlimited ability to mint NFTs, including one with the address: 0x2e599883…0e3ac7. The attack started by calling the contract owned by this miner's address to mint 200 NTFs without any restrictions or permissions.
Next, the scammer called another function from another contract using these newly created tokens to swap them for $XQJ tokens at a rate of 200 $XQJ per token. Finally, they exchanged all accumulated $XQJ tokens for 145,043 $USD. The stolen funds currently remain at the scammers original address.
Scammer Address:
Mint Transaction:
Swap Transaction Example:
Protocol details
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
