PodBrowser
Coffee with Captain

Mudwater Pack Sell-Off Linked to TokenWorks Loophole, Sergito Updates Nightshades Escape

Tuesday, 27 October 2026 · 3 min read · Listen to the episode ↗

Speakers linked the Mudwater Pack sell-off to an Apester/TokenWorks contract loophole that let an exploiter remove Apes from a strategy and sell attached packs; they said about 200 packs were involved and the added listings drove the floor down roughly 20–30%. Sergito said Nightshades Escape’s 30-level contest is under way, but the leading run appeared anomalous and the team will manually review the leaderboard before awarding its Meebit prize.

Speakers attributed the Mudwater Pack sell-off to a loophole in the Apester/TokenWorks contracts, not to Mudwater or Yuga, and said almost all of the packs involved were believed to belong to the exploiter. The route reportedly let someone exchange an Ape for one held in a TokenWorks wallet or vault, then sell the Mudwater packs attached to the acquired Ape. TokenWorks has no intended NFT-swap feature, but a user could call its strategy contract directly to remove an Ape without a fee. The strategy then retained the old token ID reference, leaving affected Apes unlistable through it.

About 200 packs were reportedly tied to the exploit. Speakers said 21 Apes were bricked and estimated that about 9,975 remained available after accounting for those and three previously burned, while cautioning that the estimate might be wrong. They described the contract as functioning as designed at the contract level, despite the swap not being an intended strategy feature and its consequences for the Apes. The loophole had reportedly existed for about a year; speakers cited a previous use on September 25 to pull Squiggles from an Art Blocks strategy. Adam also resurfaced a claim that the first seven Mudwater Claims strategies, excluding Punks, had a re-entrancy bug that enabled NFT swaps. The host said this may have been the first time the contracts held an asset valuable enough to make such a swap profitable.

Speakers said exploit-linked listings, rather than broad panic among holders, drove the floor down about 20%, with some describing prices as roughly 25–30% lower amid the extra supply. At one point, 156 of the 200 packs reportedly remained, and 109 exploit-linked packs were later counted among floor listings; the floor had not been fully swept. The floor was subsequently described as down 2.29% over 24 hours and nearly recovered, with none of the five lowest listings still attributed to the exploiter, though listings could remain higher up. Pack prices were reported at 0.6 SOL earlier that morning and about 0.68–0.75 SOL during the show; another speaker put a pack at $73. Speakers said recovery was possible after the selling ended, but lost momentum might be difficult to regain. Sustained buying that absorbed the added supply would offer a clearer signal of demand and the market-clearing price.

Mudwater’s physical-and-digital trading-card game was praised as an activity the community could organize around independently of Yuga. Its first tournament was planned as a free-entry, single-elimination event in sandbox mode, with every card available and no NFTs required. Organizers expected the bracket to be 64 players, with the option to adjust it to 32 or 128 depending on registration; matches were planned as best-of-three through the semifinals and best-of-five for the semifinals and final. Four packs were set aside as prizes: two for first place, one for second, and one by lottery for a participant who connected a Twitter account.

Sergito described Nightshades Escape as a free browser puzzle game and part of a broader focus on character IP alongside Meebits, using games and on-chain activations to develop the projects’ worlds. Its current Castle map has 30 levels, and the contest runs until Halloween. The fastest average-time finisher is due to receive a Meebit from the team’s treasury; activated Nightshades at higher tiers qualify for a better Meebit. The contest is planned to cover four maps, with three more maps and another Meebit prize expected about every two weeks. Sergito said the first-place leaderboard entry looked anomalous and was likely a bot: it completed all 30 levels with 94 deaths, compared with 302–3,022 deaths for places two through six.

The team said results require manual review because of bugs and attempted manipulation, and plans to contact the apparent winner and inspect backend movement data to verify that the person is human; Sergito said bot detection is not fully solved. The prize was described as worth roughly $700–$800, and the team said it would ensure it went to the right winner. Planned additions include fully rigged 3D Nightshades models for use in projects such as Blender, plus a free winter physical-item claim for Nightshades and Meebits holders. The physical items will be limited in quantity, rather than guaranteed to every holder.

This summary was generated from the episode transcript and can contain mistakes.