EVMOS NAME SERVICE CONTRACT AND WALLET HACK

What happened

On June 27 2022 Evmos Name Service Contract Hacked and found unauthorized transactions.

The hacker execute withdraw scripts from smart contract and move the funds to owner wallet and he is transferred funds from our wallet to another wallet.

As per our internal discussion hacker did contract access and wallet access so he use our private key to execute withdraw funds from smart contract to our wallet then he access our wallet and transfer funds to another wallet ,we are using our private key to execute smart contracts using hardhat.

SMART CONTRACT

0xEcF5cB1250c2e73a70636a24746aB269d40D01bA

Evmos Name Service Wallet Address 0xe03997bE3fBEAca28D8c0C240f8890b4c49C7099

Hacker wallet address used to transfer funds

0x07f41e4289c11703e3dc5709b2f1bc2cb6b350ad

https://evm.evmos.org/address/0x07F41e4289c11703E3dc5709b2F1BC2Cb6B350AD/transactions

Hacker wallet Transaction hash

0x424915ab8247880c873a748674459c468f7cc757cdfd7466ea9ea0e35ed4f143

The total loss: 22,438 EVMOS

The hacker transfer funds to another wallet on 29–06–2022

Wallet Address 0x93a810662920B186F55f4Ac825b730C9c8416aB1

6489 EVMOS

0x07F41e4289c11703E3dc5709b2F1BC2Cb6B350AD

15,937 EVMOS

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store