Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Enjin Smart Contract Vulnerability: $162.00K Reported Loss

·Historical incident record

Incident Overview

Enjin’s legacy ERC-1155 Crypto Items platform on Ethereum was exploited. The attacker used a storage-layout mismatch in delegate-call adapters plus an unprotected initialize function to take over the Managed Delegate Proxy via DELEGATECALL. After gaining manager privileges, they registered a malicious adapter, transferred NFTs from about 52 wallets without approval, and melted them to redeem the backing ENJ from the reserve, draining approximately 5.24 million ENJ .

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2092455321654694355 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodGovernance Attack
    Reported loss$ 8,500,000
  2. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 93,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 675,000
  4. Incident date
    Target

    CometDEX

    Attack methodSmart Contract Vulnerability
    Reported loss$ 717,518.92
  5. Incident date
    Attack methodFlashloan Price Manipulation
    Reported loss$ 7,018