Key Takeaways:
- On April 7, 2022, around 7:00 AM +UTC, WND token price dropped by 99%.
- An unverified contract added their contract to the MINER_ROLE and then minted 80,000,000 WND.
- They then swapped the WND for 744 BNB, i.e., around ~ $320,000.
WonderHero is NFT play-to-earn mobile game. The game is a turn-based RPG for iOS/Android, players collect Heroes, enter RPG combat and earn tokens.
Now, lets try to understand this attack in detail. 0xe4fd15d4b8e163b5cb02ccf7dc86749c3feaaefb called the contract 0xf856f989e1229b6fd1df0d41474744250867a4d2 to mint 80 000 000 WND tokens to 0x67dbb7020af3ae92a6d0e136e4e693a35bbb0db2. Here an unverified contract added their contract to the MINER_ROLE. Here is the link of this transaction.
Then 0x67dBb7020AF3ae92a6D0e136E4e693a35BbB0dB2 swapped the WND for 744BNB. Here is the link of this transaction. And recently, the attacker has sent the 745 BNB to TornadoCash in a series of 16 transactions. Here is the link of the address of this transaction.
As a result of this attack, the price of its native token, i.e., WND, is dropped down by 99.9%.
WonderHero Project has suspended all services, i.e., suspending game services, closing bridge services, removing liquidity, pausing smart contracts, and stopping all deposits, withdrawals, and trading services. According to their team, this attack was on their cross-chain bridging withdrawal via BNB Chain. Also, this project was fully audited. Here is the link of its audit report. Now the team will be working to identify any other loopholes in their cross-chain bridge. The team will create a new contract for WND, and the new WND tokens will be airdropped to the token holders based on the snapshot before the attack, before the block 16731166.WonderHero will compensate 100% to all liquidity providers of the WND-BNB LP pool before the attack. Team will also plan a bug bounty program.
Meanwhile, Ethan Ng, the Co-founder & CEO WonderHero, has said in the official statement that: It is a regrettable incident, we will do everything we can to make WonderHero a fun and secure game for players. We would like to take this opportunity to thank the community for their trust and continuous support, this has only steeled our resolve to deliver a great game that offers both value and fun to our players. Our community can rest assured that my team and I are fully committed to bringing WonderHero to greater heights.
