Attackers compromised Nexera's token contract credentials via BeaverTail malware on an employee machine, then transferred 47.24M NXRA. They sold 14.75M tokens for ~$449K before Nexera paused the contract and zeroed the remaining 32.5M.

An external attacker gained access to credentials for managing Nexera Fundrs platform's smart contracts. Using these credentials, the attacker transferred NXRA tokens from Fundrs' staking contracts on Ethereum. Out of the 47.24 million NXRA tokens stolen, the attacker was only able to sell 14.75 million tokens (approximately $449,000). Nexera successfully removed the remaining 32.5 million NXRA balance from the attacker's wallet, preventing further loss.