25.md

V1 CryptoPunks Exploit

Description:

when a buyer purchased a punk, the ETH deposited in the contract could be withdrawn only by the buyers, not by the seller.

References:

https://blog.mycrypto.com/nft-smart-contract-bugs-exploits

larvalabs/cryptopunks#1 (comment)

https://x.com/0xfoobar/status/1374604091263905794