Leaderboard
1082All-time rank
Q
Quixotic
Jul 1, 2022
$100K
Lost
$100K
Recovered
$0
Net loss
$100K
Unrecovered0% recovered
On July 1, 2022, Quixotic NFT marketplace on Optimism was exploited due to a missing signature check in the fillSellOrder() function. The attacker minted NFTs, listed them for sale, and used the vulnerability to swap any victim's wallet tokens for the attacker's NFTs.
The team paused all activity and reimbursed affected users.
How the exploit worked
View reproducible PoCOptimism NFT Marketplace.
Lost: $100K
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- Other
- Classification
- Input Validation
- Technique
- Signature Verification Flaw
- Attribution
- Unknown
- Chains
Optimism
Event timeline
- Jul 1, 2022Exploit executed — $100K drained via signature verification flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)