TopGoal's hot wallet was compromised, leading to the theft of over 4.8 million TMT tokens used for TopPrize rewards distribution. The attacker swapped TMT tokens for BNB on PancakeSwap and used Tornado Cash to obscure the transfer. User assets and NFTs remained secure as they were stored separately.

Hot wallets operated by TopGoal were attacked and compromised. In this hack, only the hot wallet operated by TopGoal, which manages the distribution of TopPrize rewards, was affected. All user assets including NFTs and TMTs are safe. The hackers transferred a total of 4,809,984 TMT from the TopGoal-operated hot wallet to the address 0x7F0D082D08874A57110c73a8853967e7C19D1a6e. The hackers then exchanged all those TMTs from PancakeSwap for over 2,600 BNB and used Tornado to transfer the BNB out of the address.