What happened
Quick Summary
The TwitFi token was exploited resulting in a significant amount of ETH being taken due to a miscalculation by the off-chain validator.
Details of the Exploit
The TwitFi token (TWT) has fallen victim to exploitation, leading to a loss of approximately 87 ETH ($137.3k), as the exploiter took advantage of the transfer function to send the tokens to the Reward Contract. Subsequently, the off-chain validator erroneously calculated the claimReward() amount, which the exploiter exploited further by calling the function and transferring the tokens before creating a new EOA and ultimately liquidating all the tokens.
Case & protocol details
Classification
NFT
Protocol Type
Exploit/Other
Affected asset / contract
TWT
Official Website
twitfi.com/
Protocol Twitter/X
@TwitFi_official
Evidence & learning
Sources and on-chain records
- report Report twitter.com
- analysis Web Archive archive.ph
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.