Premint XYZ Malicious Contract - Revision history

Azoundria: Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/memelandpremintrafflesmaliciouscontract.php}} {{Unattributed Sources}} Premint XYZ HomepageThe Memelist project announces on Twitter that the raffle will be stopped as a result of this. This is a global/international case not involving a specific country.
2023-10-16T17:42:19Z

Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/memelandpremintrafflesmaliciouscontract.php}} {{Unattributed Sources}} thumb|Premint XYZ HomepageThe Memelist project announces on Twitter that the raffle will be stopped as a result of this. This is a global/international case not involving a specific country.<ref name="memelandtwitter-11832" /><ref name="memelandtwitter-11833" /><ref name="premintnfttwitter-11834" /><ref..."

New page
{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/memelandpremintrafflesmaliciouscontract.php}}
{{Unattributed Sources}}

[[File:Premintxyz.jpg|thumb|Premint XYZ Homepage]]The Memelist project announces on Twitter that the raffle will be stopped as a result of this.

This is a global/international case not involving a specific country.<ref name="memelandtwitter-11832" /><ref name="memelandtwitter-11833" /><ref name="premintnfttwitter-11834" /><ref name="0xrinrintwitter-11835" /><ref name="yiyanccgtwitter-11836" /><ref name="jordan23nfttwitter-11837" /><ref name="tinacious4realtwitter-11838" /><ref name="godxelatwitter-11839" /><ref name="lovelive1069twitter-11840" /><ref name="buttrmychickentwitter-11841" /><ref name="joshual93264603twitter-11842" /><ref name="ianrocksxtwitter-11843" /><ref name="dingdingethtwitter-11844" /><ref name="premintnfttwitter-11845" /><ref name="memelandtwitter-11846" /><ref name="memelandtwitter-11847" /><ref name="nswapmedium-9700" /><ref name="wagmi-9702" /><ref name="memelandtwitter-9696" /><ref name="9gagceotwitter-9697" /><ref name="tinacious4realtwitter-11867" /><ref name="tinacious4realtwitter-11868" /><ref name="rektvicecitytwitter-11869" /><ref name="pepefrentwitter-11870" /><ref name="opensea-11871" /><ref name="web3bandittwitter-11872" /><ref name="ethnorthitwitter-11873" /><ref name="diogenefrsinopetwitter-11874" /><ref name="dyl106ethtwitter-11875" /><ref name="ronniedckytwitter-11876" /><ref name="rakamakafoethtwitter-11877" /><ref name="catsmileajatwitter-11878" /><ref name="dineroo1234twitter-11879" /><ref name="nitinpa16450775twitter-11880" /><ref name="maycmcdonaldstwitter-11881" /><ref name="moarnftsplstwitter-11882" /><ref name="caseyhlptwitter-11883" /><ref name="yardieharlowtwitter-11884" /><ref name="knifetalk3twitter-11885" /><ref name="nft4283samatwitter-11886" /><ref name="explaidtwitter-11887" /><ref name="collinsfran513twitter-11888" /><ref name="kremlinnfttwitter-11889" /><ref name="chokbalass3000twitter-11890" /><ref name="premint-11891" />

== About Premint ==
"The web3 allowlist platform. PREMINT is widely used by the world's top NFT artists, communities, brands, and celebrities to build allowlists for top NFT projects."

"PREMINT lets you define exactly who is able to join your list. Allow everyone, or set eligibility requirements. It's all part of our effort to fill your list with real collectors, not bots."

"Signing is the only way we can truly know that you are the owner of the wallet you are connecting. Signing is a safe, gas-less transaction that does not in any way give PREMINT permission to perform any transactions with your wallet."

"Today we made a lot of great security updates to PREMINT as a continuing effort to keep collectors safe. It touched everything from the dashboard to project pages to emails."

"Premint xyz got hacked." "Please do not sign any transactions that say set approvals for all!"

"Please do not interact with any @PREMINT_NFT raffles right now." "For project owners, do not try to change the settings of any raffles. It will require you to sign a malicious transaction."

"Nice lost 68eth worth of NFTs. Shoutout Premint" "I emptied my account, and the loss was transferred to 200ETH. Do you have a compensation plan?" "I lost 3 NFT because I trust you, what will you do?" "[L]ost 2 goblins..." "Just retuning my tiny astro that was stolen." "I lost .22 eth guys…" "I lost 15eth."

"Bold of you to think everyone would see this, it's your website, just shut it down or something." "Site got hacked and people got scammed hundreds of eth: Premint: Post a 12 word tweet without shutting the site down."

"You guys should make some sort of semi proof check for projects, as ultimately this will affect your reputation too."

"[T]he login signature is harmless. [Y]ou can only be drained if you send a paid [transaction] that says "set approval for all which you should NEVER do[. P]eople get drained because they don't look before they click[. A] simple sign in will never cost gas[. I]t's just an identity signature[.]"

"Premint should be paying everyone that got scammed, people put trust in you." "Can [I] get a refund for this one[?]" "Please do something this time to compensate who get scammed. You didnt do anything last time."

"We have removed all the PREMINT raffle links on our Twitter feed just in case someone accidentally clicks it and approves a malicious transaction. No worries. Most raffles have ended. We will proceed as we planned. Keep calm, stay safe!"

"Considering the recent incident with @PREMINT_NFT, we decided to stop The Potatoz allowlist raffle for Memelist holders to keep everyone safe and at ease. The 300 winners will be drawn directly from the Memelist wallets we collected from partners, contests, and giveaways."

"“Memelist” role in @MEMELAND discord is NOT a requirement. But if you have the role, remember to fill in the dyno form we shared in the “memelist-lounge” or we won’t know your wallet."

"1. Only the raffle for Memelist holders will be changed.

2. All other raffles are not affected.

3. We will announce the winners for all raffles in 24 hours."

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:
* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - Premint XYZ Malicious Contract
!Date
!Event
!Description
|-
|July 17th, 2022 2:05:00 AM MDT
|Hack Announced
|Announcement about the hack.
|-
|July 18th, 2022 11:41:00 AM MDT
|Potatoz Allowlist Stopped
|The Memelist project announces on Twitter that the raffle will be stopped as a result of this.
|}

== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

== Total Amount Lost ==
The total amount lost has been estimated at $91,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
@TINACIOUS4REAL You guys stole my nft from my wallet. Pass I didn't get and I lost my wallet can you respond to me.
@RektViceCity I'm waiting for the refund of 10 eth thank you
@Jordan23NFT Nice lost 68eth worth of NFTs. Shoutout Premint
@PepeFren_ I lost 15eth
@web3bandit this wallet is currently being drained & accepting offers below market value + NFTs being transferred out. RIP the owner
@mulligan @PREMINT_NFT are you guys will do anything ? So many ppl lost their money. Still no any explanation.
@diogenefrsinope Should we revoke?
@JoshuaL93264603 I lost 3 NFT because I trust you, what will you do ?
@dyl106_eth Lost my bored ape
@RonnieDcky Please do something this time to compensate who get scammed. You didnt do anything last time.
@OnChainMonkey thanks God, realized when it asked one more permission, lost only one my Karma Monkey
@catsmileaja Pls report this wallet scammer 0xe64ad42e9ed6135b504f4c29ffe9d3a187bc14e2
@0xrinrin Premint should be paying everyone that got scammed, people put trust in you
@lovelive1069 I lost .22 eth guys…
@Dineroo1234 Are you guys gonna do something about this? I lost money over 4ETH
@NitinPa16450775 My friend already got scammed with this
@MAYCMcDonalds Fuck i got drain wallet i dont know what to do
@moarNFTspls I LOST EVERYTHING. PLEASE HELP
@casey_hlp 0x0C9797805a22E507Bf48F35C72A67f001b7418d0 This wallet has had $200,000 worth of their NFTs sold for shit WETH Offers in the last 20 minutes. This is BAAAAD
@yardieharlow Whyyyyyyyy Lost my NFTs because of this lookalike
@knifetalk3 I emptied my account, and the loss was transferred to 200ETH. Do you have a compensation plan?
@Nft4283Sama The website send to rick roll youtube. This is insane
@ExPlaid Wth ...i lost 1.5eth
@collins_fran513 I have lost all my funds in my mm
@kremlinNFT Can i get a refund for this one
@ianrocksx lost 2 goblins...
@Chokbalass3000 I also got stripped of 4 nft...

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="memelandtwitter-11832">[https://twitter.com/Memeland/status/1548579646484414466 @Memeland Twitter] (Nov 21, 2022)</ref>

<ref name="memelandtwitter-11833">[https://twitter.com/Memeland/status/1548587912186712064 @Memeland Twitter] (Nov 21, 2022)</ref>

<ref name="premintnfttwitter-11834">[https://twitter.com/PREMINT_NFT/status/1548578432920850432 @PREMINT_NFT Twitter] (Nov 22, 2022)</ref>

<ref name="0xrinrintwitter-11835">[https://twitter.com/0xrinrin/status/1548580587795267584 @0xrinrin Twitter] (Nov 22, 2022)</ref>

<ref name="yiyanccgtwitter-11836">[https://twitter.com/yiyanccg/status/1548587738244399104 @yiyanccg Twitter] (Nov 22, 2022)</ref>

<ref name="jordan23nfttwitter-11837">[https://twitter.com/Jordan23NFT/status/1548583760030904323 @Jordan23NFT Twitter] (Nov 22, 2022)</ref>

<ref name="tinacious4realtwitter-11838">[https://twitter.com/TINACIOUS4REAL/status/1548608282591432704 @TINACIOUS4REAL Twitter] (Nov 22, 2022)</ref>

<ref name="godxelatwitter-11839">[https://twitter.com/God_Xela_/status/1548605561175887872 @God_Xela_ Twitter] (Nov 22, 2022)</ref>

<ref name="lovelive1069twitter-11840">[https://twitter.com/lovelive1069/status/1548585280554541056 @lovelive1069 Twitter] (Nov 22, 2022)</ref>

<ref name="buttrmychickentwitter-11841">[https://twitter.com/buttrmychicken/status/1548597374519746560 @buttrmychicken Twitter] (Nov 22, 2022)</ref>

<ref name="joshual93264603twitter-11842">[https://twitter.com/JoshuaL93264603/status/1548663353035276301 @JoshuaL93264603 Twitter] (Nov 22, 2022)</ref>

<ref name="ianrocksxtwitter-11843">[https://twitter.com/ianrocksx/status/1548606256868360193 @ianrocksx Twitter] (Nov 22, 2022)</ref>

<ref name="dingdingethtwitter-11844">[https://twitter.com/dingdingETH/status/1548589928300179457 @dingdingETH Twitter] (Nov 22, 2022)</ref>

<ref name="premintnfttwitter-11845">[https://twitter.com/PREMINT_NFT @PREMINT_NFT Twitter] (Nov 22, 2022)</ref>

<ref name="memelandtwitter-11846">[https://twitter.com/Memeland/status/1549087097105285120 @Memeland Twitter] (Sep 15, 2023)</ref>

<ref name="memelandtwitter-11847">[https://twitter.com/Memeland/status/1549097766810308609 @Memeland Twitter] (Sep 15, 2023)</ref>

<ref name="nswapmedium-9700">[https://medium.com/nswap/what-is-memeland-nft-by-9gag-not-just-a-jpeg-but-utility-enabled-pfps-8bd160c0ca9 What Is Memeland Nft By 9gag Not Just A Jpeg But Utility Enabled Pfps] (Nov 22, 2022)</ref>

<ref name="wagmi-9702">[https://wagmi.tips/reviews/memeland-nft/ Memeland NFT Review: Team, Utility, Roadmap And More] (Nov 22, 2022)</ref>

<ref name="memelandtwitter-9696">[https://twitter.com/Memeland/status/1528365243411271680 @Memeland Twitter] (Nov 21, 2022)</ref>

<ref name="9gagceotwitter-9697">[https://twitter.com/9gagceo/status/1528346010463768577 @9gagceo Twitter] (Nov 22, 2022)</ref>

<ref name="tinacious4realtwitter-11867">[https://twitter.com/TINACIOUS4REAL/status/1547632085925433345 @TINACIOUS4REAL Twitter] (Sep 18, 2023)</ref>

<ref name="tinacious4realtwitter-11868">[https://twitter.com/TINACIOUS4REAL/status/1547631816906944512 @TINACIOUS4REAL Twitter] (Sep 18, 2023)</ref>

<ref name="rektvicecitytwitter-11869">[https://twitter.com/RektViceCity/status/1548594221258506240 @RektViceCity Twitter] (Sep 18, 2023)</ref>

<ref name="pepefrentwitter-11870">[https://twitter.com/PepeFren_/status/1548582844557135874 @PepeFren_ Twitter] (Sep 18, 2023)</ref>

<ref name="opensea-11871">[https://opensea.io/0x0C9797805a22E507Bf48F35C72A67f001b7418d0?tab=activity https://opensea.io/0x0C9797805a22E507Bf48F35C72A67f001b7418d0?tab=activity] (Sep 18, 2023)</ref>

<ref name="web3bandittwitter-11872">[https://twitter.com/web3bandit/status/1548584828341305347 @web3bandit Twitter] (Sep 18, 2023)</ref>

<ref name="ethnorthitwitter-11873">[https://twitter.com/ethnorthi/status/1548687421902147584 @ethnorthi Twitter] (Sep 18, 2023)</ref>

<ref name="diogenefrsinopetwitter-11874">[https://twitter.com/diogenefrsinope/status/154857958160253337 @diogenefrsinope Twitter] (Sep 18, 2023)</ref>

<ref name="dyl106ethtwitter-11875">[https://twitter.com/dyl106_eth/status/1548586539042492416 @dyl106_eth Twitter] (Sep 18, 2023)</ref>

<ref name="ronniedckytwitter-11876">[https://twitter.com/RonnieDcky/status/1548587884504129536 @RonnieDcky Twitter] (Sep 18, 2023)</ref>

<ref name="rakamakafoethtwitter-11877">[https://twitter.com/RakaMakaFo_eth/status/1548589316120739840 @RakaMakaFo_eth Twitter] (Sep 18, 2023)</ref>

<ref name="catsmileajatwitter-11878">[https://twitter.com/catsmileaja/status/1548728430996381696 @catsmileaja Twitter] (Sep 18, 2023)</ref>

<ref name="dineroo1234twitter-11879">[https://twitter.com/Dineroo1234/status/1548593460827103233 @Dineroo1234 Twitter] (Sep 18, 2023)</ref>

<ref name="nitinpa16450775twitter-11880">[https://twitter.com/NitinPa16450775/status/1548579623419514880 @NitinPa16450775 Twitter] (Sep 18, 2023)</ref>

<ref name="maycmcdonaldstwitter-11881">[https://twitter.com/MAYCMcDonalds/status/1548582347569647617 @MAYCMcDonalds Twitter] (Sep 18, 2023)</ref>

<ref name="moarnftsplstwitter-11882">[https://twitter.com/moarNFTspls/status/1548582352481239040 @moarNFTspls Twitter] (Sep 18, 2023)</ref>

<ref name="caseyhlptwitter-11883">[https://twitter.com/casey_hlp/status/1548583548944150529 @casey_hlp Twitter] (Sep 18, 2023)</ref>

<ref name="yardieharlowtwitter-11884">[https://twitter.com/yardieharlow/status/1548584528867782656 @yardieharlow Twitter] (Sep 18, 2023)</ref>

<ref name="knifetalk3twitter-11885">[https://twitter.com/knifetalk3/status/1548587738244399104 @knifetalk3 Twitter] (Sep 18, 2023)</ref>

<ref name="nft4283samatwitter-11886">[https://twitter.com/Nft4283Sama/status/1548590081740574721 @Nft4283Sama Twitter] (Sep 18, 2023)</ref>

<ref name="explaidtwitter-11887">[https://twitter.com/ExPlaid/status/1548691252094603264 @ExPlaid Twitter] (Sep 18, 2023)</ref>

<ref name="collinsfran513twitter-11888">[https://twitter.com/collins_fran513/status/1548591819025485825 @collins_fran513 Twitter] (Sep 18, 2023)</ref>

<ref name="kremlinnfttwitter-11889">[https://twitter.com/kremlinNFT/status/1548593859050872833 @kremlinNFT Twitter] (Sep 18, 2023)</ref>

<ref name="chokbalass3000twitter-11890">[https://twitter.com/Chokbalass3000/status/1548666215530364931 @Chokbalass3000 Twitter] (Sep 18, 2023)</ref>

<ref name="premint-11891">[https://www.premint.xyz/ PREMINT | The web3 allowlist platform] (Sep 19, 2023)</ref></references>