Security Incident · NFT
Omni X Reentrancy Attack
Decentralized NFT financialization protocol Omni X has been attacked and stolen funds have been transferred to Tornado.cash.
- Reported loss
- 1,300 ETH
- Attack category
- Reentrancy Attack
Incident Overview
The main reason for this attack is that the burn function will call the callback function externally to cause the reentrancy problem, and the liquidation function uses the old vars value for judgment, resulting in the user's status identification even after reentrancy and then borrowing. Being set as unborrowed results in no repayments.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.