According to NFT September 2 investigators in the Twitter post above, two individuals used a technical flaw in the project - out of a possible 1,221 technical flaws - to steal 450 NFTs in the free forging phase NFTs, which Originally intended to be one for each wallet.
As discussed in our Twitter space earlier today --
We're screwed. We're screwed. Our contract had a flaw that allowed the duo to mine over 450 flawed NFTs.
This is what we are doing
According to RPF, his smart contract had a flaw that caused the code to be used, which allowed the robbers to be allocated more NFTs than allowed.
Shortly after RPF exploited the vulnerability, the team moved into action to rectify the situation by offering a transaction to one of them and paying them $2.5 Ether (ETH) (3,944) worth of writing this article. $68 bounty, $330 recovered NFT, which is accepted.
Crypto investigators noted that the exploiters pointed to "negotiating in good faith and allowing us to reach a reasonable settlement with them."
Called "BadGuys" Free Mint NFT Featuring Artwork, "Cheater Accidentally Indulges Blockchain".
10,000 will be available as a member's whitelist or pre-order before the launch of the NFT collection this fall.
Owning a BadGuy NFT provides exclusive access to the mint, RPF's upcoming master coin, and other projects.
ignore warning
The watchdog acknowledged that the breach was due to an alert from an unknown source about a potential flaw sent 30 minutes before the mint went live.
"After reviewing three different development teams, we do not believe in the credibility of the data sent to us... We were clearly wrong and we are truly sorry."
Realize that chaos is rare and responsible. RPF. You deserve praise. Over the past few months I've seen flawed token contracts, bad code, and anomalous code that anyone could use, but none of the developers warned us what they just said
NFT investigators pointed out that the blockchain creative agency DoxxedMedia handled all the art and contract work, which they had done "without permission from our team and without an independent third party."
The irony of using this vulnerability was not missed by the crypto community, with some praising it. NFT investigators have acknowledged their mistakes, while others have questioned how a company that specializes in checking for smart contract vulnerabilities failed to properly check its own projects.
