Security Incident
MoneyMon Smart Contract Vulnerability: $85.52K Reported Loss
The LegendaryMoneyMonNft contract’s cliamRewred function had a signature verification flaw.
- Reported loss
- $ 85,519.47
- Attack category
- Smart Contract Vulnerability
Incident Overview
The verify() only checked if recoverSigner(...) == admin, without properly validating cases where ecrecover returns address(0). The attacker set admin to zero address, then used an invalid signature (r=0, s=0, v=27) to bypass checks, arbitrarily claim rewards, drain all tokens from the contract, and swap them for USDT via PancakeSwap.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.