OMNI Real Estate Hack
What happened
The OMNI Real Estate Token (ORT) protocol was exploited using smart contract vulnerability approximately for $70k USD.
The key to the attack was insufficient argument validation and imperfection of calculations in the StakingPool contract. In this case function _check_Reward returns the wrong output amount and led to the unfair ORT rewards distribution. Then ORT tokens were swapper to BNB.
The attacker's profit is approximately 236BNB.
Attacker address:
https://bscscan.com/address/0x9bbd9450…90255e
https://bscscan.com/address/0xda5919bf…78d528
Attacker contract:
https://bscscan.com/address/0xdD87D807…BF531B
1st exploiting tx:
https://bscscan.com/tx/0x49bed801…aa7613
2nd exploiting tx:
https://bscscan.com/tx/0xa916674f…bd0e97
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report hacked.slowmist.io
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.