MINER Hack

The MINER's smart contract was exploited, resulting in a loss of 466,624 USD worth 168.6 WETH.

MINER is a collection of 100,000 avatars tied to the first tokens built on ERC-X, a fully optimized, experimental standard that enables the use of multiple token standards. On Feb 14, 2024, the project was exploited due to a double-transfer vulnerability caused by a lack of input validation in the update function. The attacker performed several malicious transactions, exploiting the vulnerability to get free tokens by sending tokens to themselves.

The stolen funds were transferred to another EOA and still remain in this address as of Feb 17, 2024. The MINER team posted on their platform that they have sent an on-chain message to the hacker, offering a bounty of 120,000 USD, approximately equivalent to 25% of the exploited funds.

Attacker Address:

https://etherscan.io/address/0xea75AeC1…aeEFbA

Funds Holder as of Feb 17, 2024:

https://etherscan.io/address/0xC181dE2f…f34a70

Malicious Transactions:

https://etherscan.io/tx/0x5cc93e9d…bdb8c0

https://etherscan.io/tx/0xddacdc06…53e8db

https://etherscan.io/tx/0xd22b05ff…cde1b2

Malicious Contract Address:

https://etherscan.io/address/0xBfF51C9C…3EbF29

On-chain message offering a bounty to the attacker:

https://etherscan.io/tx/0x27a01149…b692ae