What happened
The attacker's address:
The transaction behind the exploit:
NowSwap hack was made possible by an error when updating the smart contract’s code. The original code of the contract contained a value, K, of 1,000 in three different places. The update to the code changed this value in two places but not the third.
This third location was a check of the value of K, but it only checked for a value 1/10 of the actual value. This enabled the attacker to swap 1 wei for 98% of the value stored in the contract.
Stolen funds were deposited into Tornado Cash mixer:
Protocol details
Classification
Protocol Logic / Token & Share Accounting / Exchange (DEX)
Protocol Type
DEX
Implementation language
Solidity
Protocol links
Website
@nowswap_org
Evidence
- report @BlockSecTeam incident report x.com
- report @nowswap_org incident report twitter.com
- report @PuPuThrashing incident report twitter.com
- analysis Website reference halborn.com
- analysis DeFiLlama defillama.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
