Omni

On July 10, 2022, Omni, an NFT money market, was exploited via reentrancy across two functions lacking reentrancy guards and not following the checks-effects-interactions pattern. The attacker used NFTs as collateral to borrow ETH, then cleared the debt at the reentrancy point, making the borrowing bad debt and removing the need to repay, stealing 1,300 ETH in testing funds.