Security Incident · ETH Ecosystem
XCarnival Contract Vulnerability
The NFT liquidity solver XCarnival was attacked, the hacker made a profit of 3,087 ETH (about 3.8 million US dollars), and the hacker has returned 1,467 ETH after the negotiation.
- Reported loss
- 1,620 ETH
- Attack category
- Contract Vulnerability
Incident Overview
The core of this vulnerability is that when borrowing, there is no judgment on whether the NFT in the order has been withdrawn.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.