According to security researcher 0xQuit, this morning someone exploited a known vulnerability in the ApeStr contract to exchange 21 BAYC for 21 ApeStr-held apes and claim the corresponding blind box packs, netting a profit of approximately $14,000. The vulnerability stems from the buyTargetNFT function's failure to properly validate call data. This vulnerability already existed in SQUIGSTR but had not been exploited until now. After the attack, 21 unsuspecting apes were added to the ApeStr contract, and the attacker has already released 210 blind box packs into the auction pool. https://www.(wublock123.com)/news/apestr-exploit-drains-21-bayc-for-14k-profit-70845