Security Incident · ETH Ecosystem

thirdweb Contract Vulnerability

December 5, 2023·Historical incident record

On December 5, 2023, thirdweb, the Web3 base development platform, indicated that a security vulnerability was discovered in pre-built smart contracts.

Attack category: Contract Vulnerability

Incident Overview

The impacted pre-built contracts include but are not limited to DropERC20, ERC721, ERC1155 (all versions), and AirdropERC20. Please see a full list of impacted smart contracts and mitigation steps at this link (https://blog.thirdweb.com/security-vulnerability/).

Sources & References

SlowMist Hacked archivehacked.slowmist.io (opens in a new tab)Original incident referencetwitter.com (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.