Blockchain security firm CertiK reported that the Z-ERA non-fungible token (NFT) card game has suffered an exploit resulting in a $285,000 theft. CertiK discovered an exploit against Z-ERA’s BNB Smart Chain address where an externally-owned account deployed an unverified contract to steal funds. The attacker obtained 1.8 million ZERA tokens and sold them for approximately $285,000. Following the attack, the hacker transferred 1178.5 BNB to TornadoCash. The incident caused a 99% drop in the price of the ZERA token, which traded for $13.00 after its launch on June 19, but now trades at $0.007.
The Z-ERA NFT card game, which recently announced its launch, suffered a significant impact with the theft affecting about 27% of its total circulating supply of 6.58 million tokens. The exploit occurred shortly after the project’s announcement of the game and token launch on June 18, with an associated app released on June 15. Despite the incident, Z-ERA has not issued any statements regarding the hack, and attempts to contact the project by CryptoSlate remained unanswered. CertiK’s report highlights the vulnerabilities and risks associated with NFT projects, emphasizing the importance of robust security measures to safeguard digital assets in the blockchain space.