# 🦸‍♀️ Cypherpunk Zero NFT Megathread

**URL:** <https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502>\
**Category:** General\
**Created:** [May 6, 2022, 3:15pm UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502 "2022-05-06T15:15:41Z")\
**Posts on this page:** 20\
**Page:** 51

<div class="post-metadata">

**Author:** ![pacu](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/pacu/32/15383_2.png) [@pacu](https://forum.zcashcommunity.com/u/pacu)\
**Post date:** [December 21, 2023, 4:39pm UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1135 "2023-12-21T16:39:30Z")

</div>

That unlimited weth spend also is super dangerous.

---

<div class="post-metadata">

**Author:** ![adjychris](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/adjychris/32/13562_2.png) [@adjychris](https://forum.zcashcommunity.com/u/adjychris)\
**Post date:** [December 26, 2023, 8:28pm UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1136 "2023-12-26T20:28:00Z")

</div>

As all of you in this thread are aware, Cypherpunk Zero NFTs have been (and may continue to be) stolen due to a security [vulnerability](https://blog.thirdweb.com/security-vulnerability/) in the smart contract ECC used to deploy the assets.

We learned about this on Dec. 5, but unfortunately, we’ve been unable to locate the smart contract owners keys which means we’ve been unable to mitigate. The wallet seems to have been lost during or since ECC’s restructure. We are frustrated and heartbroken as many of you are.

ECC has a snapshot of all the wallets that held Cypherpunk Zero NFTs on Dec. 5, and we are working with the ZecHub team and the Decentralizing Zcash Digital Task Force to determine next steps. We’re also happy to take ideas from the community, as we consider our course of action. 🙏

We will come back to you with news when we sort out a plan. Until then, onward.

---

<div class="post-metadata">

**Author:** ![Shawn](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/shawn/32/187_2.png) [@Shawn](https://forum.zcashcommunity.com/u/Shawn)\
**Post date:** [December 26, 2023, 9:18pm UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1137 "2023-12-26T21:18:20Z")

</div>

Correct me if I’m wrong, but reading the vulnerability, it seems that only Cypherpunk NFT holders that have used their ETH wallet to interact with dapps like Opensea or Uniswap, etc… (where you grant token spending approval) are at risk of losing their NFT?

What if you have never interacted, never granted spending authority to a third party?

NFTs safu?

---

<div class="post-metadata">

**Author:** ![Zzzzzz](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/zzzzzz/32/20679_2.png) [@Zzzzzz](https://forum.zcashcommunity.com/u/Zzzzzz)\
**Post date:** [December 26, 2023, 9:32pm UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1138 "2023-12-26T21:32:28Z")

</div>

I had CPZ stolen from a wallet that had never granted spend authority, had only ever received CPZ

---

<div class="post-metadata">

**Author:** ![Shawn](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/shawn/32/187_2.png) [@Shawn](https://forum.zcashcommunity.com/u/Shawn)\
**Post date:** [December 26, 2023, 9:40pm UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1139 "2023-12-26T21:40:07Z")

</div>

Interesting :thinking:, I created a brand new ETH wallet, got my CPZs at launch, and haven’t touched that ETH wallet for anything since.

All my NFTs are still there… 🤞

---

<div class="post-metadata">

**Author:** ![Lhw0001](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/lhw0001/32/20691_2.png) [@Lhw0001](https://forum.zcashcommunity.com/u/Lhw0001)\
**Post date:** [December 26, 2023, 10:50pm UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1140 "2023-12-26T22:50:52Z")

</div>

Direct airdrop inscriptions and NFTs

---

<div class="post-metadata">

**Author:** ![tokidoki](https://avatars.discourse-cdn.com/v4/letter/t/dc4da7/32.png) [@tokidoki](https://forum.zcashcommunity.com/u/tokidoki)\
**Post date:** [December 27, 2023, 12:21pm UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1141 "2023-12-27T12:21:05Z")

</div>

> [@Shawn](#):
>
> All my NFTs are still there… 🤞

The attacker is not likely to drain all wallets, as they still want the NFTs to be traded in the market. That’s their only way to benefit from all this.

---

<div class="post-metadata">

**Author:** ![spectre](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/spectre/32/37765_2.png) [@spectre](https://forum.zcashcommunity.com/u/spectre)\
**Post date:** [December 27, 2023, 6:34pm UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1142 "2023-12-27T18:34:50Z")

</div>

Same here! 🤞

---

<div class="post-metadata">

**Author:** ![dontpanicburns](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/dontpanicburns/32/32565_2.png) [@dontpanicburns](https://forum.zcashcommunity.com/u/dontpanicburns)\
**Post date:** [December 27, 2023, 7:08pm UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1143 "2023-12-27T19:08:23Z")

</div>

anyone have ‘the attackers’ address?

---

<div class="post-metadata">

**Author:** ![artkor](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/artkor/32/28573_2.png) [@artkor](https://forum.zcashcommunity.com/u/artkor)\
**Post date:** [December 27, 2023, 7:20pm UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1144 "2023-12-27T19:20:33Z")

</div>

1. 0x44cdf0E532Dda3474dAE859181e5865380d86a73
2. 0x7e7a90dDf323FAdb2e9435dB482bec7Df66B69A7

The most interesting thing is that his permissions have not been revoked and he could have been bombed in the same way. Apparently he’s not afraid of it.

Here I have indicated my thoughts about his strange behavior in the second paragraph:

> <https://twitter.com/ruzcash/status/1739894346139263439?s=20>

right now:

 ![Снимок экрана 2023-12-27 в 22.23.18](https://global.discourse-cdn.com/zcash/original/3X/4/1/4155f3c8e324c1ec1dfca378913e9e45610aeb7e.png)

---

<div class="post-metadata">

**Author:** ![Lhw0001](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/lhw0001/32/20691_2.png) [@Lhw0001](https://forum.zcashcommunity.com/u/Lhw0001)\
**Post date:** [December 29, 2023, 7:48am UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1145 "2023-12-29T07:48:54Z")

</div>

How to cancel the authorization, 😯

---

<div class="post-metadata">

**Author:** ![Lhw0001](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/lhw0001/32/20691_2.png) [@Lhw0001](https://forum.zcashcommunity.com/u/Lhw0001)\
**Post date:** [January 2, 2024, 1:33pm UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1146 "2024-01-02T13:33:14Z")

</div>

How to compensate, because many secondary market acquisitions and how to develop in the future

---

<div class="post-metadata">

**Author:** ![Shawn](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/shawn/32/187_2.png) [@Shawn](https://forum.zcashcommunity.com/u/Shawn)\
**Post date:** [January 4, 2024, 8:15pm UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1147 "2024-01-04T20:15:19Z")

</div>

Well, it looks like I spoke too soon, one of my Cypherpunk Zeros is gone. 😞

For some reason it still appears in my Metamask but when I looked it up on Etherscan it was transferred out 22days ago apparently…

---

<div class="post-metadata">

**Author:** ![tokidoki](https://avatars.discourse-cdn.com/v4/letter/t/dc4da7/32.png) [@tokidoki](https://forum.zcashcommunity.com/u/tokidoki)\
**Post date:** [January 5, 2024, 2:45am UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1148 "2024-01-05T02:45:39Z")

</div>

Yeah, Metamask NFT data is not refreshed often.

---

<div class="post-metadata">

**Author:** ![nuttycom](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/nuttycom/32/9621_2.png) [@nuttycom](https://forum.zcashcommunity.com/u/nuttycom)\
**Post date:** [January 6, 2024, 3:09am UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1149 "2024-01-06T03:09:44Z")

</div>

Just noticed that my favorite Zero is also gone.

My hope is that maybe with the advent of ZSAs, these NFTs can be “reborn” there - properly shielded! And after all, since the ETH chain thefts are all public information, it should be possible to identify the correct owners at the time of the theft. That would be a great PoC application for the ZSA launch.

---

<div class="post-metadata">

**Author:** ![tokidoki](https://avatars.discourse-cdn.com/v4/letter/t/dc4da7/32.png) [@tokidoki](https://forum.zcashcommunity.com/u/tokidoki)\
**Post date:** [January 6, 2024, 3:41am UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1150 "2024-01-06T03:41:33Z")

</div>

I made a dune query on the list of holders and their respective NFTs at 1 block before the first known attack: [https://dune.com/queries/3306298/5537323](https://dune.com/queries/3306298/5537323)

---

<div class="post-metadata">

**Author:** ![zerodartz](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/zerodartz/32/26722_2.png) [@zerodartz](https://forum.zcashcommunity.com/u/zerodartz)\
**Post date:** [January 6, 2024, 6:52am UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1151 "2024-01-06T06:52:15Z")

</div>

one problem i see is sum ppl kept buying and selling many punks still after theft. so dats a hard situation. not talkin even the stolen ones just normal ones. and sum maybe bought also stolen ones not knowin it.

---

<div class="post-metadata">

**Author:** ![pkr](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/pkr/32/29938_2.png) [@pkr](https://forum.zcashcommunity.com/u/pkr)\
**Post date:** [January 6, 2024, 6:57am UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1152 "2024-01-06T06:57:36Z")

</div>

Down bad on the coin.  
Down bad on the NFT.

I guess there’s only upside from here? 😂

Didn’t the dolls also not get completed?

---

<div class="post-metadata">

**Author:** ![zerodartz](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/zerodartz/32/26722_2.png) [@zerodartz](https://forum.zcashcommunity.com/u/zerodartz)\
**Post date:** [January 6, 2024, 7:15am UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1153 "2024-01-06T07:15:58Z")

</div>

dolls got completed and shipped long ago. after sum delays yes.

---

<div class="post-metadata">

**Author:** ![artkor](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/artkor/32/28573_2.png) [@artkor](https://forum.zcashcommunity.com/u/artkor)\
**Post date:** [January 6, 2024, 7:20am UTC](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502/1154 "2024-01-06T07:20:09Z")

</div>

> [@nuttycom](#):
>
> That would be a great PoC application for the ZSA launch.

From this point on, I’m starting to get excited that this hack happened!

[Previous page](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502.md?page=50)

[Next page](https://forum.zcashcommunity.com/t/cypherpunk-zero-nft-megathread/41502.md?page=52)
