Quixotic Hack

Quixotic, the largest NFT marketplace on Optimism, experienced an exploit on July 1 that resulted in the loss of ERC-20 tokens. The hacker was able to transfer offers made on NFTs to their own wallet, resulting in a loss of at least $100,000.

The Quixotic NFT marketplace was exploited due to a vulnerability in its offer feature. The hacker was able to transfer offers made on NFTs to their own wallet by deploying their smart contract to overrun the existing logic of the offer function. The team at NFT project Apetimism first noted the exploit and recommended canceling all open offers to protect users.

The Quixotic team paused all marketplace activity to investigate the incident and assured users that lost funds would be returned. The hacker was able to steal at least $200,000 in ERC-20 tokens, with several large outflows noted from their wallet, including 110,756 USDC and 170,882 Optimism (OP), valued at $90,500.

Transaction details on etherscan: https://etherscan.io/tx/0x2a822968…17647f