Digital Asset
Intelligence
Security Incident · ETH Ecosystem

PREMINT Malicious Code Injection Attack

·Historical incident record

Incident Overview

The NFT access list tool PREMINT issued an alert through its official Twitter, because some users reminded that the tool's website was hacked, and the collections of NFT collectors have been stolen. Subsequently, the blockchain security company SlowMist confirmed that the PREMINT website was attacked by hackers. Hackers carried out phishing attacks by implanting malicious JS (JavaScript) files in the website, deceiving users to sign the transaction of "set approvals for all", thereby stealing users. of NFT assets. The attack lost about 280 ETH in total, amounting to $381,818, making it one of the biggest NFT hacks of the year.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    DeeKay

    Attack methodAccount Compromise
    Reported loss$ 150,000
  2. Incident date
    Target

    Tableland

    Attack methodDiscord was hacked
    Reported loss$ 45,819
  3. Incident date
    Target

    Audius

    Attack methodContract Vulnerability
    Reported loss$ 1,100,000
  4. Incident date
    Target

    BiFi

    Attack methodPrivate Key Leakage
    Reported loss1,852 ETH
  5. Incident date
    Target

    Tableland

    Attack methodDiscord was hacked
    Reported lossNot disclosed