A quick-moving development saw XCarnival, which calls itself a Metaverse Asset Bank, negotiate the restoration of half of the 3,087 ETH it lost to a hacker in less than 24 hours. By taking advantage of a bug in its smart contract, the attacker borrowed money from the platform using a Bored Ape Yacht Club NFT that had already been withdrawn after being pledged.