NFT Cloud Hack

NFT Cloud platform was exploited, which caused a loss of 85,330 $USD worth of $BNB.

NFT Cloud is a Web3 platform for entrepreneurs and creators. The staking contract of the platform was exploited due to an indexing-related logic issue. The attacker was able to receive 100,000 $CLOUD tokens using a malicious contract with an unverified source code, and then drain the PancakeSwap liquidity pool.

The token price dropped by more than 75% cause of an exploit. The total funds lost reached roughly 265 $BNB which is worth 85,300 $USD at the moment. All the stolen funds were transferred through TornadoCash.

Attacker address:

https://bscscan.com/address/0x16b904b6…7f1dd0

Malicious transaction:

https://bscscan.com/tx/0x4897b7fb…b4d48d

Malicious contract:

https://bscscan.com/address/0x09845b8e…b0495f

Transfer transaction example:

https://bscscan.com/tx/0x49b8aa37…dc04cb