TokenWorks shifts protocol to withdraw-only at block 25452023 after Chainlink callback frontrun leads to CryptoPunk 5450 purchase
AI Market Summary
TokenWorks disclosed a frontrunnable Chainlink callback that enabled an attacker to manipulate NFT selection and acquire CryptoPunk 5450 unfairly. The protocol has been switched to withdraw-only mode and purchases are halted, with a snapshot taken for $FWA holders, while the team evaluates a relaunch or rebuild. The incident highlights smart-contract and oracle-integration risk, likely weighing on related NFT liquidity and ETH-denominated activity near term.
Impact level
● Medium
Affected assets
ETH/USDT+1.12%
AI Insight · ETH/USDTAI Insight
▼ Bearish
Trade now
⚠️ AI-generated insights are based on news content and are provided for informational purposes only. They do not constitute investment advice or represent the views of BingX. Investing involves risk. Please trade responsibly.
TokenWorks said a vulnerability allowed an attacker to frontrun a Chainlink callback and change which NFT was selected, resulting in the unfair purchase of CryptoPunk 5450, the highest-priced listing in the pool. The team said it has contacted the Punk 5450 owner and will cover the ETH worth about $66,000. The protocol was switched to withdraw-only mode as of block 25452023 and a snapshot of $FWA holders was taken. Purchases are currently disabled while the team evaluates whether to restart or rebuild the project.
