Pawnfi Hack

TOTAL LOST $820K
Low Other ethereum

What happened

Quick Summary

Pawnfi, an Ethereum-based NFT project, was exploited resulting in a loss of 633,411 $USD.

Details of the Exploit

Several Pawnfi contracts including ApeStaking were exploited, leading to a total funds loss of 633,441 $USD worth of 366.77 $ETH. The attacker transferred 100 $ETH through TornadoCash and the remaining 266.77 $ETH to another EOA address, which currently holds the stolen funds.

Block Data Reference

Attacker Address:

https://etherscan.io/address/0x8f7370D5…b514cC

Funds Holder Address:

https://etherscan.io/address/0xcd12d441…ff7b2d

Malicious Transactions:

https://etherscan.io/tx/0xe855cc3b…af0864

https://etherscan.io/tx/0x8d303637…7a59a5

https://etherscan.io/tx/0x94fbebf0…705602

Funds Transfer Transaction:

https://etherscan.io/tx/0xc62899a9…056e7b

Funds Transfer to TornadoCash Transaction:

https://etherscan.io/tx/0xf83afda6…a05118

Case & protocol details

Classification NFT / Token & Share Accounting
Protocol Type Exploit/Other
Smart Contract Language Solidity
Official Website pawnfi.com/
Protocol Twitter/X @PawnfiOfficial

Evidence & learning

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

BEVO NFT $45K
Flurry Finance $293K
Tinyman $3.0M
Pinecone Finance $200K

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes