EVMOS NAME SERVICE CONTRACT AND WALLET HACK
What happened
On June 27 2022 Evmos Name Service Contract Hacked and found unauthorized transactions.
The hacker execute withdraw scripts from smart contract and move the funds to owner wallet and he is transferred funds from our wallet to another wallet.
As per our internal discussion hacker did contract access and wallet access so he use our private key to execute withdraw funds from smart contract to our wallet then he access our wallet and transfer funds to another wallet ,we are using our private key to execute smart contracts using hardhat.
SMART CONTRACT
0xEcF5cB1250c2e73a70636a24746aB269d40D01bA
Evmos Name Service Wallet Address 0xe03997bE3fBEAca28D8c0C240f8890b4c49C7099
Hacker wallet address used to transfer funds
0x07f41e4289c11703e3dc5709b2f1bc2cb6b350ad
https://evm.evmos.org/address/0x07F41e4289c11703E3dc5709b2F1BC2Cb6B350AD/transactions
Hacker wallet Transaction hash
0x424915ab8247880c873a748674459c468f7cc757cdfd7466ea9ea0e35ed4f143
The total loss: 22,438 EVMOS
The hacker transfer funds to another wallet on 29–06–2022
Wallet Address 0x93a810662920B186F55f4Ac825b730C9c8416aB1
6489 EVMOS
0x07F41e4289c11703E3dc5709b2F1BC2Cb6B350AD
15,937 EVMOS