MetaDragon's NFT contract lacked ownership verification on minted NFTs, allowing attackers to claim and convert over 4,000 NFTs belonging to other users. The attacker sold the stolen META tokens for 321.5 BNB.

According to the SlowMist security team, potential suspicious activity has been detected in the GameFi protocol MetaDragon, and users are advised to remain vigilant. MetaDragon stated that users need to convert their META NFTs into tokens as soon as possible to minimize community losses. The META NFT contract has just been hacked. The hacker converted many NFTs in wallets to META tokens and sold them. The attack path originated from the META NFT.