Leaderboard
243All-time rank
NM

Nexus Mutual

Dec 14, 2020

$8.0M
Lost
$8.0M
Recovered
$0
Net loss
$8.0M
Unrecovered0% recovered

Attacker gained remote access to founder Hugh Karp's computer and replaced his MetaMask extension with a malicious version. The compromised wallet was then used to sign and transfer 370,000 NXM tokens (~$8M) to attacker-controlled addresses.

The attacker later demanded 4,500 ETH ransom.

Target
DeFi
Classification
Frontend & Infrastructure
Technique
Key Leaked via Infrastructure
Attribution
Unknown
Chains
Ethereum

Event timeline

  1. Dec 14, 2020
    Exploit executed — $8.0M drained via key leaked via infrastructure
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents