{"id":63788,"date":"2022-07-01T15:11:36","date_gmt":"2022-07-01T12:11:36","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=63788"},"modified":"2025-09-06T10:52:28","modified_gmt":"2025-09-06T07:52:28","slug":"hacker-breaches-the-largest-nft-marketplace-built-on-optimism","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/hacker-breaches-the-largest-nft-marketplace-built-on-optimism\/","title":{"rendered":"Hacker breaches the largest NFT marketplace built on Optimism"},"content":{"rendered":"<p>The largest NFT marketplace on Optimism&#8217;s layer-2 ecosystem, Quixotic, was hacked after an update.<\/p>\n<blockquote class=\\\"twitter-tweet\\\" data-lang=\\\"en\\\">\n<p dir=\\\"ltr\\\" lang=\\\"en\\\">We can confirm that a recent update to our marketplace contract was exploited, allowing a hacker to steal approved ERC-20 tokens <\/p>\n<p>1. We will be refunding all stolen ERC-20 tokens<br \/>2. NFTs remain safe and are not affected by the exploit<br \/>3. All marketplace activity remains paused <a href=\\\"https:\/\/t.co\/wBYt903QVO\\\">https:\/\/t.co\/wBYt903QVO<\/a><\/p>\n<p>\u2014 Quixotic \ud83d\udd34\u2728 \u2014 Optimism NFT Marketplace (@quixotic_io) <a href=\\\"https:\/\/twitter.com\/quixotic_io\/status\/1542790067130978307?ref_src=twsrc%5Etfw\\\">July 1, 2022<\/a><\/p><\/blockquote>\n<p> <script async=\\\"\\\" src=\\\"https:\/\/platform.twitter.com\/widgets.js\\\" charset=\\\"utf-8\\\"><\/script><\/p>\n<p>The attacker targeted the Offer function \u2014 listings of collectible tokens. He deployed a malicious contract and stole cryptocurrency totaling about $100,000 in various ERC-20 tokens.<\/p>\n<p>The Quixotic team fixed the vulnerability but paused all operations on the platform.<\/p>\n<p>According to the statement, NFTs remained safe. All stolen funds will be automatically reimbursed to users; no action is required on their part.<\/p>\n<p><a href=\"https:\/\/u1f987.com\/en\/news\/crypto-industry-losses-from-hacks-reach-1-22-billion-so-far-this-year\">Crypto projects lost<\/a> more than $1.22 billion in Q1 2022.<\/p>\n<p>The largest incidents were the Wormhole and Ronin exploits with damages of <a href=\"https:\/\/u1f987.com\/en\/news\/hackers-drain-more-than-319-million-from-wormhole-cross-chain-bridge-pool\">$319 million<\/a> and <a href=\"https:\/\/u1f987.com\/en\/news\/ronin-the-ethereum-sidechain-hacked-attacker-siphons-625-million\">$625 million<\/a> respectively.<\/p>\n<p>Following the March breach, the Ronin sidechain used in the game <a href=\"https:\/\/u1f987.com\/en\/news\/what-is-axie-infinity-axs\">Axie Infinity<\/a> was <a href=\"https:\/\/u1f987.com\/en\/news\/ronin-sidechain-relaunches-three-months-after-625-million-hack\">relaunched<\/a> only at the end of June.<\/p>\n<p>Follow ForkLog&#8217;s bitcoin news on our <a href=\\\"https:\/\/telegram.me\/forklog\\\" target=\\\"_blank\\\" rel=\\\"nofollow noopener\\\">Telegram<\/a> \u2014 cryptocurrency news, prices and analysis.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The leading NFT marketplace on Optimism&#8217;s layer-2 ecosystem was exploited after an update.<\/p>\n","protected":false},"author":1,"featured_media":63789,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1154],"class_list":["post-63788","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-crimes"],"aioseo_notices":[],"amp_enabled":true,"views":"18","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/63788","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=63788"}],"version-history":[{"count":1,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/63788\/revisions"}],"predecessor-version":[{"id":63790,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/63788\/revisions\/63790"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/63789"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=63788"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=63788"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=63788"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}