TOPGOAL

DESCRIPTION OF EVENTS

"TopGoal is an officially licensed digital collectibles with NFT and blockchain empowered GameFi of football metaverse. We partner world famous football players, clubs as well as institutions to allow fans to collect legendary football player cards only owned by you, build your fantasy squad and participate in the football game of players from all over the world!"

"TopGoal team truly believes in the future of crypto and the potential of bridging sports to crypto through NFT and Gaming. The team has also committed lots of effort and resources to the project."

"Today TopGoal operation hot wallet was attacked and compromised." "Hot wallets operated by TopGoal were attacked and compromised. In this hack, only the hot wallet operated by TopGoal, which manages the distribution of TopPrize rewards, was affected. All user assets including NFTs and TMTs are safe." "Our tech team has been investigating this issue and collaborating with BNB chain (previously known as BSC) to rule out future attacks."

"TopGoal’s tech team has confirmed the hacker attacked the TopGoal’s service to distribute TMT rewards of TopPrize event. All users’ wallets and assets on the platform have not been attacked. The tech team has been working on enhancing the security of the whole platform service to prevent future hacking events. The team is also collaborating with industry partners to track down the hacker."

"The liquidity pool attacked by the hacker on PancakeSwap was 100% contributed by the TopGoal team initially with $1 million self fund." "TopGoal team has suspended the platform service temporarily in order to protect users' assets as soon as the attack was identified."

"The hackers transferred a total of 4,809,984 TMT from the TopGoal-operated hot wallet to the[ir] address. The hackers then exchanged all those TMTs from PancakeSwap for over 2,600 BNB and used Tornado to transfer the BNB out of the address."

"The services of TopGoal website have been resumed now. Users can deposit and withdraw TMT or stable coins. If you have requested withdrawal during the temporary suspension, the funds are returned to your TopGoal account."

"The team has been working with BNB Chain, BSCScan, PeckShield, Certik and other related partners to solve this issue and resolve the unnecessary misunderstanding and concerns among its community." "The tech team has been working on improving the security of the operation hot wallet to make sure attacks are prevented in the future

"[I]n order to mitigate the negative impact on TMT price, the team has decided to rebalance the entire liquidity pools on PancakeSwap, BiSwap and Mars to restore the stability of the TMT-BUSD price. TMT tokens equal to the amount (4,809,984) compromised through this attack will be withdrawn from the pools. All the BUSDs remain in the liquidity pools."

Explore This Case Further On Our Wiki

TopGoal is a system of NFT collectibles featuring historic moments of football/soccer. One of the hot wallets for the TMT token was breached through an undisclosed means, and 4,809,984 TMT was taken, liquidated for 2,600 BNB. The funds were mixed through TornadoCash. The original tokens were all belonging to the founding team. An equivalent number of TMT tokens were withdrawn from the liquidity pool to restore the original token price.

SlowMist Hacked - SlowMist Zone (Jun 26)
https://medium.com/@TopGoal_NFT/follow-up-on-topgoal-hacking-event-8a0b3debe608 (Mar 11)
https://bscscan.com/address/0x7f0d082d08874a57110c73a8853967e7c19d1a6e (Mar 11)
TopGoal suffers 4,809,984 TMT loss by Stolen hot wallet - Opera News (Mar 11)
https://medium.com/@TopGoal_NFT/latest-update-and-solution-of-todays-hacking-event-e18774b6e69a (Mar 11)
@TopGoal_NFT Twitter (Mar 11)
@TopGoal_NFT Twitter (Mar 11)
https://coinmarketcap.com/currencies/bnb/historical-data/ (Feb 15)

More case studies

Titano Finance
Evil Contractors

RigoBlock Missing
Access Controls