The ASTX breach appears tied to the same Flooring Protocol contract flaw seen in other BT404-style forks, as investigators trace losses of roughly $40,000 and broader spillover across NFT-linked token pools.
Asterix’s ASTX token contract was exploited in an attack the team said struck around 4 a.m. GMT+8, draining roughly $40,000 in assets, or about 30 ETH, from its Uniswap v4 pool through 242 transactions. Asterix told users to stop interacting with the current pool and token, confirmed it is investigating, and said it plans a secure token migration and a full post-mortem. The exploit is being linked to the same vulnerability that hit Flooring Protocol on June 8 and also affected BMP, with researchers saying the weakness spread through forked DN404 and BT404-style code. Security researchers and project developers described the bug as a “ghost ownership” accounting flaw in a hybrid fungible-NFT token structure, allowing an attacker to manipulate token accounting and create a near-infinite balance of redeemable tokens. The Flooring incident was initially estimated at more than $900,000 in losses before white hat interventions helped recover over $500,000 in blue-chip NFTs. Yuga Labs CEO Michael Figge said the company launched a rescue that secured 68 NFTs worth an estimated 346 ETH, including Bored Apes, CryptoPunks and other collections. The spread of the exploit has renewed scrutiny on unaudited forked protocols that reuse vulnerable base code across multiple projects.