Digital Asset
Intelligence
Security Incident · Solana Ecosystem

Malda Contract Vulnerability: $285.00K Reported Loss

·Historical incident record

Incident Overview

The vulnerability originated in the Migrator.sol contract. The contract allowed the Mendi Comptroller address to be passed dynamically, rather than being hardcoded. This enabled the attacker to supply their own malicious Comptroller, mint a synthetic position on Malda, and withdraw approximately $285,000.

Sources & References

Original incident referencehttps://mirror.xyz/0x4Da818DD3aAfb9D042a76B5037cdBa61533C7692/yhFSyxCImJ23OD00vb2GQ0JmbcBkX2CO4V2t_29ykIA (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodAccount Compromise
    Reported lossNot disclosed
  2. Incident date
    Target

    Loopscale

    Attack methodOracle Attack
    Reported loss$ 5,800,000
  3. Incident date
    Target

    Texture

    Attack methodContract Vulnerability
    Reported loss$ 2,200,000
  4. Incident date
    Target

    MegaETH

    Attack methodAccount Compromise
    Reported lossNot disclosed
  5. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 12,000,000