Cryptocurrency [loss] $2M+

Tweet by Arthur_0x

2022-03-21 [vendor] Arthur_0x NFT theft [chain] ethereum
Primary Source ↗
Financial Loss $1.6M (1,643,033 USD)
Blockchain(s) Ethereum

Incident Details

Arthur_0x, a crypto investor and NFT whale, had two of their hot wallets compromised. The attacker stole ETH and transferred some big-ticket NFTs out of the wallets, including at least five CloneX NFTs and 17 Azuki NFTs. CloneX NFTs have been selling for an average of 16.76 ETH (about $50,000) over the past 30 days, and Azuki NFTs have been going for 12.5 ETH ($37,600). The attacker had not yet sold all the NFTs they had stolen, but within two hours of the attack they had 545 ETH (about $1.6 million) in their wallet.Arthur_0x wrote on Twitter that they had previously only ever used a hardware wallet on their PC, but when they started more regularly trading NFTs they’d started using a hot wallet. “Hot wallet on mobile phone is indeed not safe enough”, they wrote on Twitter, “Guess no more hot wallet usage then.” They also wrote, “The only thing I can say to the hacker is: you mess with the wrong person” and tweeted the wallet address to which the NFTs were being transferred, asking for it to be blocklisted.

Total loss estimated at $1,643,033.

Technical Details

Initial Attack Vector
Smart contract exploit / hack
Vendor / Product
Arthur_0x NFT theft

Timeline

  1. 2022-03-21 Breach occurred
  2. 2022-03-21 Publicly disclosed