What happened
On May 29, 2026, the LegendaryMoneyMonNft contract on BNB Chain was exploited through a signature-validation bypass, with a reported loss of about $85,519.
Technical Root Cause
The contract treated a failed ecrecover result as a valid signer when the admin address was zero, so a malformed signature could pass verification.
Case & protocol details
Classification
NFT
Protocol Type
Exploit/Other
Official Website
moneymon.fun/
Protocol Twitter/X
@MoneyMonDotFun
Market Context at Time of Hack
Token Price at Hack
$1.97
Attack Timeline
After setting the admin to the zero address, the attacker supplied a malformed signature to claim rewards, drained the contract tokens, and swapped them for USDT on PancakeSwap.
Evidence & learning
Sources and on-chain records
- report Report x.com
- analysis SlowMist MoneyMon incident record hacked.slowmist.io
- analysis LegendaryMoneyMonNft contract bscscan.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.