Hack history / 2026 / Hack or exploit
OMNI404
Hack or exploit on Sep 11, 2026 · Smart Contract Vulnerability
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$6K
dollars at the time
Returned
none listed
as the sources state it
Rank
#2,315
among thefts by dollars lost
What happened
Ethereum ERC-404 token OMNI404 (O404) derived NFT mint/burn counts from integer balanceOf/units diffs in _transfer(). Its transfer() treated values ≤50 as ERC-721 IDs but still moved a fixed 1e18 units. Using flash loans and Uniswap V3 exact-output swaps (transfer(recipient, 1/2/.../21)), the attacker received full-unit tokens while the pool booked wei-level amounts, draining about 2.4 WETH.
Details
- Date
- Sep 11, 2026
- Kind
- Hack or exploit
- Method
- Smart Contract Vulnerability
- How in
- Price, oracle and governance
- Target
- not stated
- Chains
- not stated
Reported by
Related incidents
RsETHSafeModule 2026 · Hack or exploit · $7.7M
Third-party Gnosis Safe Module (SquidRouterModule) 2026 · Hack or exploit · $3.2M
Haedal Vault 2026 · Hack or exploit · $915K
NEM（NemTokenV2） 2026 · Hack or exploit · $822K
Butter Bridge 2026 · Hack or exploit · $180K
Third-party Gnosis Safe Module (SquidRouterModule) 2026 · Hack or exploit · $3.2M
Haedal Vault 2026 · Hack or exploit · $915K
NEM（NemTokenV2） 2026 · Hack or exploit · $822K
Butter Bridge 2026 · Hack or exploit · $180K
Cite this page
SwanBluechip, "OMNI404 hack, Sep 11, 2026: $6K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/hta82ab67316/ (data as of 2026-11-01).