The burgeoning Non-Fungible Token (NFT) market has been thrust into chaos as NFT Trader, a prominent peer-to-peer trading platform, fell victim to the largest NFT hack to date. Millions of dollars’ worth of high-value NFTs, including rare Bored Ape and Mutant Ape Yacht Club tokens, VeeFriends, Art Blocks, and World of Women NFTs, were pilfered in an elaborate cyber attack.
The digital heist, shrouded in mystery, began when an X user issued a red alert, prompting users who had engaged in trades on NFT Trader to revoke approval to their contracts with specific compromised addresses. The hacker targeted at least 13 Mutant Ape Yacht Club and 37 Bored Ape tokens, resulting in losses approaching $3 million.
🚨🚨🚨🚨 RED ALERT
— dingaling (@dingalingts) December 16, 2023
If you've ever used NFT Trader in the past, revoke approval to their contract ASAP (0x13d8faF4A690f5AE52E2D2C52938d1167057B9af)
So far already 37 BAYC and 13 MAYC have already been drained to this address https://t.co/KBdpkb8woX
this is not nfttrader, common approvals among the victims seems to be flooring protocol this time
— foobar (@0xfoobar) December 17, 2023
revoke these two addresses:
0x49AD262C49C7aA708Cc2DF262eD53B64A17Dd5EE
0x3eb879cc9a0Ef4C6f1d870A40ae187768c278Da2
exact cause unclear but better safe than sorry
Scale of the Theft and Targeted Approach
The sheer scale of this unprecedented digital heist has sent shockwaves through the NFT community, with some of the most valuable apes, each worth over $300,000, now in the hands of the mysterious assailant. The hacker appears to have honed in on individuals who had used NFT Trader in the past, exploiting vulnerabilities in the old smart contracts of the platform.
A massive theft appears to be happening right now — all these NFTs have been stolen from wallets… some of the absolute top tier apes. pic.twitter.com/fHPqTT8Vqg
— NFTstats.eth (@punk9059) December 16, 2023
Timeline of the Heist and Hacker’s Demands
The hacker initiated the assault approximately four hours before reports surfaced, swiftly draining valuable NFTs to specific addresses. In a surprising twist, the hacker, identified as 0x3dc115307c7b79e9ff0afe4c1a0796c22e366a47b47ed2d82194bcd59bb4bd46, emerged with an unconventional proposition – a demand for a bounty in exchange for the safe return of the stolen digital assets.

Users now face a moral quandary: whether to entertain the hacker’s demands and regain ownership of their cherished NFTs or stand firm against supporting criminal activities. Unexpectedly, the hacker has begun returning some NFTs for free, challenging assumptions about their motivations. This unpredictable move adds a layer of uncertainty to the ongoing saga.
BAYC Founder’s Intervention
In an unexpected twist, Garga, the founder of Bored Ape Yacht Club (BAYC), has offered to pay the 10% ETH bounty demanded by the hacker to facilitate the return of the stolen BAYC apes. While this gesture aims to alleviate the impact on affected users, concerns are raised about the potential message it sends to cyber attackers regarding the profitability of exploiting vulnerabilities.
One of the victims said the hacker returned a rare NFT along with 31 ETH, worth nearly $70,680: “And now the hacker just sent me 31 eth? What in the world is going on. Is this real life?,” the victim said.

NFT Trader has confirmed the cyber attack on its old smart contracts, urging users to take swift action by removing delegation to the compromised addresses. This precautionary step is crucial to prevent further unauthorized access and exploitation of NFTs associated with these addresses.
The OPSEC failures of Apes fund North Korea’s nuclear program https://t.co/s1vu78XOQw
— @bft.wtf on bluesky (@BennettTomlin) December 16, 2023
Information for this story was found via Cryptoticker, Cointelegraph, The Block, and the sources mentioned. The author has no securities or affiliations related to the organizations discussed. Not a recommendation to buy or sell. Always do additional research and consult a professional before purchasing a security. The author holds no licenses.