הסיווג ושיטת התקיפה משקפים את דיווחי המקורות. תיאורים מפורטים מוצגים בשפת המקור; לקריאת התחקיר המלא ניתן לפתוח את הקישור המצורף.
DefiLlamaתיאור המקור באנגלית
Enjin’s legacy CryptoItems infrastructure was exploited through a storage-slot collision between a registered adapter and its Managed Delegate Proxy. Because adapter functions execute in the proxy’s storage context via DELEGATECALL, the attacker called the adapter’s public initialize(uint256), which wrote the attacker’s address into the proxy’s pendingManager storage slot. The attacker then called acceptManager(), gained managerial control, registered a malicious adapter, stole ENJ-backed assets from users, and liquidated them through melt().
SlowMistתיאור המקור באנגלית
Enjin’s legacy ERC-1155 Crypto Items platform on Ethereum was exploited. The attacker used a storage-layout mismatch in delegate-call adapters plus an unprotected initialize function to take over the Managed Delegate Proxy via DELEGATECALL. After gaining manager privileges, they registered a malicious adapter, transferred NFTs from about 52 wallets without approval, and melted them to redeem the backing ENJ from the reserve, draining approximately 5.24 million ENJ .
הסיווג ושיטת התקיפה משקפים את דיווחי המקורות. תיאורים מפורטים מוצגים בשפת המקור; לקריאת התחקיר המלא ניתן לפתוח את הקישור המצורף.
DefiLlamaתיאור המקור באנגלית
Enjin’s legacy CryptoItems infrastructure was exploited through a storage-slot collision between a registered adapter and its Managed Delegate Proxy. Because adapter functions execute in the proxy’s storage context via DELEGATECALL, the attacker called the adapter’s public initialize(uint256), which wrote the attacker’s address into the proxy’s pendingManager storage slot. The attacker then called acceptManager(), gained managerial control, registered a malicious adapter, stole ENJ-backed assets from users, and liquidated them through melt().
SlowMistתיאור המקור באנגלית
Enjin’s legacy ERC-1155 Crypto Items platform on Ethereum was exploited. The attacker used a storage-layout mismatch in delegate-call adapters plus an unprotected initialize function to take over the Managed Delegate Proxy via DELEGATECALL. After gaining manager privileges, they registered a malicious adapter, transferred NFTs from about 52 wallets without approval, and melted them to redeem the backing ENJ from the reserve, draining approximately 5.24 million ENJ .
