What happened
Quick Summary
Pawnfi, an Ethereum-based NFT project, was exploited resulting in a loss of 633,411 $USD.
Details of the Exploit
Several Pawnfi contracts including ApeStaking were exploited, leading to a total funds loss of 633,441 $USD worth of 366.77 $ETH. The attacker transferred 100 $ETH through TornadoCash and the remaining 266.77 $ETH to another EOA address, which currently holds the stolen funds.
Block Data Reference
Attacker Address:
Funds Holder Address:
Malicious Transactions:
Funds Transfer Transaction:
Funds Transfer to TornadoCash Transaction:
Protocol details
Classification
NFT / Token & Share Accounting
Protocol Type
Exploit/Other
Implementation language
Solidity
Protocol links
Website
@PawnfiOfficial
Evidence
- report @AnciliaInc incident report twitter.com
- analysis DeFiLlama defillama.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
