Cryptocurrency [loss] $2M+

One of the attacker wallets

2023-01-27 [vendor] Azuki Twitter [chain] ethereum
Primary Source ↗
Financial Loss $1.7M (1,740,000 USD)
Blockchain(s) Ethereum

Incident Details

Hackers were able to compromise the Twitter account belonging to the popular Azuki NFT project, which they then used to promote a fake NFT drop to its 334,000 followers. Users who tried to mint the NFTs instead had their wallets emptied of pricey NFTs and cryptocurrencies.Stolen NFTs included 74 Otherdeeds (floor price ~$2,700 each), 3 Porsche NFTs (floor ~$3,100), 57 Beanz (floor ~$2,600), 12 Doodles (floor ~$10,600), 2 Mutant Apes (floor ~$24,300), and 49 Pudgy Penguins (floor ~$9,200) to the attacker. Altogether, those stolen NFTs could fetch almost ~$1 million if sold at floor price.One single wallet transferred 750,000 of the USDC stablecoin to the attacker, resulting in a particularly brutal loss for one individual.

Total loss estimated at $1,740,000.

Technical Details

Initial Attack Vector
Smart contract exploit / hack
Vendor / Product
Azuki Twitter

Timeline

  1. 2023-01-27 Breach occurred
  2. 2023-01-27 Publicly disclosed