On July 16-17, 2022, Premint's frontend was compromised via a vulnerable open-source image upload tool that allowed an attacker to inject malicious JavaScript into a library file. The attacker created a malicious domain and updated the JavaScript to redirect to their code, which then tricked users into signing setApprovalForAll transactions, allowing theft of 314 NFTs including Bored Apes and Moonbirds.

The NFT access list tool PREMINT issued an alert through its official Twitter, because some users reminded that the tool's website was hacked, and the collections of NFT collectors have been stolen. Subsequently, the blockchain security company SlowMist confirmed that the PREMINT website was attacked by hackers. Hackers carried out phishing attacks by implanting malicious JS (JavaScript) files in the website, deceiving users to sign the transaction of "set approvals for all", thereby stealing users. of NFT assets. The attack lost about 280 ETH in total, amounting to $381,818, making it one of the biggest NFT hacks of the year.