Tweet by Arthur_0x
Primary Source ↗Incident Details
Arthur_0x, a crypto investor and NFT whale, had two of their hot wallets compromised. The attacker stole ETH and transferred some big-ticket NFTs out of the wallets, including at least five CloneX NFTs and 17 Azuki NFTs. CloneX NFTs have been selling for an average of 16.76 ETH (about $50,000) over the past 30 days, and Azuki NFTs have been going for 12.5 ETH ($37,600). The attacker had not yet sold all the NFTs they had stolen, but within two hours of the attack they had 545 ETH (about $1.6 million) in their wallet.Arthur_0x wrote on Twitter that they had previously only ever used a hardware wallet on their PC, but when they started more regularly trading NFTs they’d started using a hot wallet. “Hot wallet on mobile phone is indeed not safe enough”, they wrote on Twitter, “Guess no more hot wallet usage then.” They also wrote, “The only thing I can say to the hacker is: you mess with the wrong person” and tweeted the wallet address to which the NFTs were being transferred, asking for it to be blocklisted.
Total loss estimated at $1,643,033.
Technical Details
- Initial Attack Vector
- Smart contract exploit / hack
- Vendor / Product
- Arthur_0x NFT theft
Timeline
- 2022-03-21 Breach occurred
- 2022-03-21 Publicly disclosed