What happened
Quick Summary
The TwitFi token was exploited resulting in a significant amount of ETH being taken due to a miscalculation by the off-chain validator.
Details of the Exploit
The TwitFi token (TWT) has fallen victim to exploitation, leading to a loss of approximately 87 ETH ($137.3k), as the exploiter took advantage of the transfer function to send the tokens to the Reward Contract. Subsequently, the off-chain validator erroneously calculated the claimReward() amount, which the exploiter exploited further by calling the function and transferring the tokens before creating a new EOA and ultimately liquidating all the tokens.
Protocol details
Classification
NFT
Protocol Type
Exploit/Other
Affected asset / contract
TWT
Protocol links
Website
@TwitFi_official
Evidence
- report @CertiKAlert incident report twitter.com
- analysis Web Archive archive.ph
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
