What happened
NFT Cloud platform was exploited, which caused a loss of 85,330 $USD worth of $BNB.
NFT Cloud is a Web3 platform for entrepreneurs and creators. The staking contract of the platform was exploited due to an indexing-related logic issue. The attacker was able to receive 100,000 $CLOUD tokens using a malicious contract with an unverified source code, and then drain the PancakeSwap liquidity pool.
The token price dropped by more than 75% cause of an exploit. The total funds lost reached roughly 265 $BNB which is worth 85,300 $USD at the moment. All the stolen funds were transferred through TornadoCash.
Attacker address:
Malicious transaction:
Malicious contract:
Transfer transaction example:
Protocol details
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
