What happened
An example of the transaction:
https://etherscan.io/tx/0x613b2de3…a5d9f5
The exploiter's address:
https://etherscan.io/address/0xef967ece…5bd58b
The attacker minted a massive amount of FNFT with no cost and used the minted FNFT to drain assets in the vault.
The attacker:
- flashloaned 2 ECO tokens from Uniswap
- called "mintAddressLock" in the Revest contract twice to get 2 FNFT[ID 1036] tokens and 7,700,00 FNFT[ID 1037] tokens
- during the second FNFT minting process, the attacker exploited the reentrancy issue and called the function “depositAdditionalToFNFT” to cause the minted FNFT can be used to drain assets in the vault
- called "withdrawFNFT" to drain assets from the vault by burning 7,700,001 FNFT[ID 1037] tokens and repaying the flashloan.
Stolen funds were deposited into the Tornado Cash mixer:
https://bloxy.info/txs/transfers_from/0xef967ece…5bd58b?currency_id=1
Case & protocol details
Security review history
- Solidity Finance Report
Evidence & learning
Attack pattern
Compare incidents →Proof of concept
1 availableSources and on-chain records
- report Post-Mortem blocksecteam.medium.com
- report Report twitter.com
- transaction Transaction etherscan.io
- analysis Website reference revestfinance.medium.com
- analysis Website reference twitter.com
- analysis Website reference twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.