Digital Asset
Intelligence
Security Incident

MALT Smart Contract Vulnerability: $72.00K Reported Loss

·Source-attributed incident record

Incident Overview

An attacker exploited a logic flaw in MALT’s swap function. With negligible input they triggered an external rebalanceHook that pulled DAI from the protocol’s Capital Source into the same pool. The swap then checked its invariant against the post-hook balances and treated the treasury-funded DAI as caller-supplied funds, allowing a disproportionate MALT withdrawal and a loss of about $ 72,000.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2106418632041668784 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodUnauthorized Access to Internal Systems
    Reported loss0
  2. Incident date
    Target

    GoldPesa

    Attack methodSmart Contract Vulnerability
    Reported loss$ 114900
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed