White Hat Team Recovers Over $500K in NFTs from Flooring Protocol Vulnerability

iconKuCoinFlash
Share
AI summary iconSummary
A white hat team led by Solidity security researcher Quit recovered over $500,000 in NFTs from the vulnerable Flooring Protocol, salvaging 66 assets including 29 BAYC and 4 MAYC. Attackers exploited flaws in ownership validation and integer underflow to drain liquidity and crypto markets. Researchers identified a critical attack vector and intervened before additional losses occurred. Users are advised to avoid making deposits. The recovered assets will be returned in the coming weeks. MiCA regulations may influence future protocol security.

Odaily Planet Daily reports that Solidity security researcher Quit disclosed details of the Flooring Protocol vulnerability, revealing that the attacker exploited a ownership validation flaw in the BT404-style accounting logic to create a "phantom ownership" state, combined with multiple integer underflow vulnerabilities to obtain infinite fpToken balances, ultimately selling the tokens and draining the protocol's liquidity.

Quit stated that, after discovering another attack vector affecting more liquidity pools, they initiated a white-hat rescue operation with several security researchers to transfer assets from the vulnerable Flooring Protocol liquidity pools. In total, they rescued 66 NFTs, including 29 BAYCs, 4 MAYCs, 2 CryptoPunks, 1 Azuki, 2 Elementals, 26 Captains, 1 Moonbird, 2 Doodles, and 1 BAKC, with a total value exceeding $500,000.

Quit advises users not to deposit any more NFTs into Flooring Protocol and states that the relevant NFTs will be returned to their legitimate owners within the coming weeks.

Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.