stazie Hack

REPORTED LOSS $2.1M
Medium Access Control

What happened

A fraudster known as "cryptopunksbot" promised NFT investors the chance to win one of ten exclusive NFT avatars on CryptoPunk's Discord server. Stazie, a co-founder of the NFT game project Hedgie, accepted the bogus offer, but it cost him 16 CryptoPunks, which might be worth more than $1 million. Stazie inadvertently sent the wallet seed phrase to the scammer, resulting in the funds' loss.

The hacker's address:

https://www.larvalabs.com/cryptopunks/accountinfo?account=0x7a1e3450…164a75

In addition to NFTs, the hacker managed to steal 839 ETH at:

https://etherscan.io/tx/0x2607e98b…791279

https://etherscan.io/tx/0x5bcd0bc7…28f7d8

https://etherscan.io/tx/0xe6542d0b…652569

Stolen funds to the external wallet and deposited into Tornado Cash mixer:

https://etherscan.io/address/0x4d26d18d…0acca4#tokentxns

Case & protocol details

Classification Other
Protocol Type Exploit/Access control
Protocol Twitter/X @stazie

Evidence & learning

Attack pattern

Compare incidents →
Access Control Attacks

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

AFX $24.1M
B² Network $3.8M
Third-party SquidRouterModule $3.2M
StablR $12.8M

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes