What happened
On May 29, 2026, the LegendaryMoneyMonNft contract on BNB Chain was exploited through a signature-validation bypass, with a reported loss of about $85,519.
Technical root cause
The contract treated a failed ecrecover result as a valid signer when the admin address was zero, so a malformed signature could pass verification.
How it happened
After setting the admin to the zero address, the attacker supplied a malformed signature to claim rewards, drained the contract tokens, and swapped them for USDT on PancakeSwap.
Protocol details
Market Context at Time of Hack
Token Price at Hack
$1.97
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
