An NFT game named Munchables, operating on the Ethereum layer-2 blockchain Blast, has fallen victim to a $62 million exploit. The breach was disclosed by Munchables in a post on March 26 at 9:33 pm UTC, where it stated efforts to track the exploiter and halt the illicit transactions. Blockchain analyst ZachXBT identified the alleged attacker's wallet address, currently holding $62.45 million in Ether, according to Blastscan data.

The exploiter engaged with the Munchables protocol at 9:26 am UTC, extracting a total of 17,413 ETH, as per DeBank data. Later, $10,700 worth of ETH was transferred through the Orbiter Bridge, converting Blast ETH back into native ETH. At 10:05 pm UTC, the wallet sent an additional 1 ETH to a new wallet address. ZachXBT attributed the exploit to the hiring of a North Korean developer known as "Werewolves0943" by the Munchables team.

Solidity developer 0xQuit alleged in a post on March 27 that the attack was premeditated, with a developer upgrading the Lock contract just before launch, allowing the attacker to manipulate the system and withdraw an inflated Ether balance.

Munchables, a GameFi app on Blast, focuses on NFT-based creatures. Players stake Blast ETH and Blast USD to earn Blast points and unlock in-game perks. Some users, including metaverse adviser Cygaar, urged Blast to roll back the chain to before the exploit, although others argued against centralized intervention, aligning with Blast's ethos as a platform for gaming and experimentation rather than strict decentralization.