Flash Loan Attack on OMNI404 Leads to 2.4 WETH Theft

OMNI404, an NFT project, fell victim to a flash loan attack that resulted in the theft of 2.4 WETH. The attacker exploited a coding vulnerability in the protocol's NFT minting mechanism, using a flash loan to manipulate the process and extract funds in a single transaction before the vulnerability could be detected or stopped. The exploit exposed a weakness in how the project handled rapid interactions within its smart contract system.

• Flash loan attacks leverage uncollateralized, instantaneous loans to manipulate token mechanics in a single block, exposing poorly-designed mint logic.
• The vulnerability in OMNI404's code allowed an attacker to drain funds by gaming the NFT minting process without holding capital upfront.
• The incident prompted the project to freeze its systems in response to the breach.