Stolen ‘Smol Brains’ NFTs Returned to Users Hours After Treasure Exploit

Prices of Treasure’s native MAGIC token recovered after falling some 40% in early Asian hours following positive developments.

AccessTimeIconMar 3, 2022 at 7:16 a.m. UTC
Updated May 11, 2023 at 6:58 p.m. UTC

Hackers have started to return stolen “Smol Brains” and other non-fungible tokens (NFT) hours after exploiting popular Arbitrum-based marketplace Treasure on Thursday morning, developers confirmed in a message.

  • “We believe we have identified and rectified the cause of the issue,” developers said in a message on Treasure's Discord channel. “This was a basic bug arising from a prior fix that should have been identified earlier.”
  • Users who fail to receive the NFTs will be made whole in a remuneration plan voted on and passed by the community members, who take part in the long-term growth of the marketplace.
  • “Once we have the full list of remaining impacted parties who did not receive back their stolen NFTs, we will propose a number of remediation options to ensure users are made whole. These options will be tabled with the community and voted on” by the decentralized autonomous organization (DAO), the note read.
  • Treasure is the biggest NFT ecosystem on layer 2 protocol Arbitrum, which runs atop the Ethereum blockchain. Each project listed on the Treasure marketplace uses native MAGIC tokens in its own metaverse.
  • MAGIC allows users to take part in future decisions and drive the growth of the marketplace. Metaverse refers to the immersive digital world created by the combination of virtual reality, augmented reality.
  • In early Asian hours on Thursday, hackers were able to exploit a vulnerability on the protocol that allowed them to mint NFTs for no cost. Treasure asked users to delist their NFTs from the marketplace at the time. NFTs are blockchain-based representation of a digital or real-world asset.
  • Blockchain addresses uncovered by sleuths show several "Smol Brains" and “Legions” were stolen in the attack. The Smol Brains NFTs are one of the most popular on Treasure, with some stating the stolen collection alone was valued at over $1.4 million at the time of the attack.
  • Prices of MAGIC fell 40% in the hours following the exploit. However, prices have since recovered to the $3.34 mark, as per data from CoinGecko.
  • Thursday’s exploit put Treasure in the news for the second time in as many weeks. In February, anonymous blockchain sleuth “zackxbt” claimed Treasure developer “JC” was previously involved in several short-lived NFT projects that were abandoned soon after hyped launches.
  • Treasure, however, responded to the allegations stating JC worked on a contract basis and delivered stipulated work before the previous projects were abandoned by their creators.


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Shaurya Malwa

Shaurya is the Deputy Managing Editor for the Data & Tokens team, focusing on decentralized finance, markets, on-chain data, and governance across all major and minor blockchains.