Hack history / 2025 / Hack or exploit
StepHeroNFTs
Hack or exploit on Feb 21, 2025 · Reentrancy
ATTACK TX CONFIRMED ON CHAINSOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$90K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,765
among thefts by dollars lost
What happened
The StepHeroNFTs claimReferral function was vulnerable to reentrancy, allowing an attacker to repeatedly trigger transfers before state updates. The attacker drained approximately 90K USD in a single transaction.
Details
- Date
- Feb 21, 2025
- Kind
- Hack or exploit
- Method
- Reentrancy
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- BNB Chain
Reported by
Related incidents
GMX V1 EVM 2025 · Hack or exploit · $42M
Arcadia V2 2025 · Hack or exploit · $3.5M
Unverified_35bc 2025 · Hack or exploit · $7K
Arcadia V2 2025 · Hack or exploit · $3.5M
Unverified_35bc 2025 · Hack or exploit · $7K
Cite this page
SwanBluechip, "StepHeroNFTs hack, Feb 21, 2025: $90K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht2879cf46fc/ (data as of 2026-10-31).