Metaverse project MetaPoint (POT) announced on their Telegram channel that they were hacked, leading to a suspension of all operations. Blockchain security team CertiK reported that the project's contract on BSC (Binance Smart Chain) experienced a drop of over 78%.
According to CertiK, about $910k has been taken by the hackers, with funds distributed between addresses 0x0D1 and 0x554. As a result, MetaPoint has suspended all operations to address the security breach.
#CertiKSkynetAlert 🚨
— CertiK Alert (@CertiKAlert) April 11, 2023
Project @MetaPoint1024 (POT) announced on their Telegram that they were hacked and suspended all operations.
Contract BSC:0x3b5e381130673f794a5cf67fbba48688386bea86
Which had dropped >78%.https://t.co/LW2Wz8Us9O
Stay vigilant! pic.twitter.com/EvPYJ5cZK5
Read full thread:
1/ In example transaction 0x1c5, a victim deposits their POT tokens. Then the unverified victim contract creates contract 0x9b7, where the user then transfers its POT tokens to.
2/ Contract 0x9b7 contains an open approval function that allows the attackers to obtain the full allowance of the user’s deposit.
3/ The attacker approves attack contract 0xf8D the full allowance for the contract owned POT tokens by calling the function `Approve`. The exploiter then sold user’s tokens that were stored in the contract.
4/ Exploiter 0x0D1 has since moved 2,513 BNB (~$814.4k) to @TornadoCash.

5/ In total ~$910k has been taken between 0x0D1 and 0x554
All Comments