Digital Asset
Intelligence
Security Incident · ETH Ecosystem

OMNI404 Smart Contract Vulnerability: $5.92K Reported Loss

·Historical incident record

Incident Overview

Ethereum ERC-404 token OMNI404 (O404) derived NFT mint/burn counts from integer balanceOf/units diffs in _transfer(). Its transfer() treated values ≤50 as ERC-721 IDs but still moved a fixed 1e18 units. Using flash loans and Uniswap V3 exact-output swaps (transfer(recipient, 1/2/.../21)), the attacker received full-unit tokens while the pool booked wei-level amounts, draining about 2.4 WETH.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2098300936720695573 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 38130
  2. Incident date
    Target

    Symbiosis

    Attack methodSmart Contract Vulnerability
    Reported loss$ 775,000
  3. Incident date
    Target

    Spiral

    Attack methodPrice Manipulation
    Reported loss$ 26,800
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 7,730,000
  5. Incident date
    Target

    ORBToken

    Attack methodSmart Contract Vulnerability
    Reported loss$ 32,610.72