Security Incident · ETH Ecosystem
Enjin Smart Contract Vulnerability: $162.00K Reported Loss
Enjin’s legacy ERC-1155 Crypto Items platform on Ethereum was exploited.
- Reported loss
- $ 162,000
- Attack category
- Smart Contract Vulnerability
Incident Overview
The attacker used a storage-layout mismatch in delegate-call adapters plus an unprotected initialize function to take over the Managed Delegate Proxy via DELEGATECALL. After gaining manager privileges, they registered a malicious adapter, transferred NFTs from about 52 wallets without approval, and melted them to redeem the backing ENJ from the reserve, draining approximately 5.24 million ENJ .
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.