Security Incident
OWNLY Contract Vulnerability
The ownlyio project's NFTStaking contract was attacked, with a total of 115 BNB stolen and a loss of about $36,418.
- Reported loss
- 115 BNB
- Attack category
- Contract Vulnerability
Incident Overview
The reason for this attack is that the unstake function of the pledge contract of the ownio project does not check the user's claim status, so the attacker can use the unstake function to receive the own tokens in the contract infinitely, thereby extracting all the own tokens in the pledge contract, and finally the attacker The acquired owned tokens are exchanged for 115 BNB through the pair transaction.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.