Digital Asset
Intelligence
Security Incident · ETH Ecosystem

thirdweb Contract Vulnerability

·Historical incident record

Incident Overview

On December 5, 2023, thirdweb, the Web3 base development platform, indicated that a security vulnerability was discovered in pre-built smart contracts. The impacted pre-built contracts include but are not limited to DropERC20, ERC721, ERC1155 (all versions), and AirdropERC20. Please see a full list of impacted smart contracts and mitigation steps at this link (https://blog.thirdweb.com/security-vulnerability/).

Sources & References

Original incident referencehttps://twitter.com/thirdweb/status/1731841493407576247 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodRug Pull
    Reported loss$ 60,919
  2. Incident date
    Attack methodRug Pull
    Reported loss$ 235,705
  3. Incident date
    Target

    Time

    Attack methodContract Vulnerability
    Reported loss$ 190,000
  4. Incident date
    Attack methodRug Pull
    Reported loss$ 539,000
  5. Incident date
    Attack methodPhishing Attack
    Reported loss$ 43,000