Meebits Hack

The exploiter's address:

https://etherscan.io/address/0x009988ff…74933e

The exploiter's smart contract:

https://etherscan.io/address/0x270ff230…d46ffb

Affected NFT smart contract:

https://etherscan.io/address/0x7bd29408…716bc7#code

Minting function in NFT uses pseudo randomization depends on block values:

uint index = uint(keccak256(abi.encodePacked(nonce, msg.sender, block.difficulty, block.timestamp))) % totalSize.

It means close to zero randomnesses of the returned index. The exploiter has used a bot and deployed a contract to interact with the NFT contract. The exploiter used open information which exactly what metadata he should receive to sell NFT with the highest profit. If the bot minted an undervalued NFT, the bot reverted the transaction. This vulnerability allowed exploiter minting predictable expensive NFTs.