Date:: April 7, 2022
Amount Stolen:: $1,025,000
Laundered Via:: Tornado Cash
Tags:: 🔑 SquidSquad, Infinite Mint, Dust Collectors
Earlier today, there was an attack on our cross-chain bridging withdrawal via BNB Chain. Based on our investigations, the attackers managed to get the signature and minted 80M $WND on BNB Chain and traded through PancakeSwap for a total of 750 BNB which resulted in the sudden drop of $WND price.
The attack was first discovered on 7 April 2022, 14:53pm (GMT+8). The team took swift actions by suspending all services for users and blocked other attacks by the hackers by disabling all WonderHero platform services and trading on listed exchanges.
A thorough investigation will be done and details will be updated.
On-chain the incident is also connected to other hacks such as mgnr.io, Polyplay, Wonderhero and ANKR founder as dust leftover in theft addresses was swept to a single address in February 2022.
- https://bscscan.com/tx/0x20dabda59dd46d45a7b6b5b324830159fb108cd2119232d7f0056d8085de17e1
- https://bscscan.com/tx/0x776fd6f2b265be782c862d05ecf225ace6fa2268b9028ca3df3c65aeed2677a1
- 0x67dbb7020af3ae92a6d0e136e4e693a35bbb0db2 - Direct Theft -> Tornado Cash on BSC
- 0x613ded514d4df7fedaf345537c1503981682223f - ETH, BASE Dec 2024
- 0x01b9ccca267496b073428a5c84a15d391db5d94e
- 0x2d7554062664050294640891a122019a68ac5a2b Dust
- 0x613ded514d4df7fedaf345537c1503981682223f - on BASE
- 0xABf21fAb0811FB8A5A1F3421e33FAbc49FD82e25 - Gnosis Safe
- https://wonderhero.medium.com/community-update-wonderhero-bnb-chain-bridging-withdrawal-compromised-84327a4fd79
- https://vice.com/en/article/3abwj3/play-to-earn-game-token-collapses-after-hacker-cashes-out
- https://twitter.com/Wonderhero_io/status/1511971430547996672
- https://twitter.com/CertiKAlert/status/1512023769010823169
- https://twitter.com/peckshield/status/1511974889271398400