Digital Asset
Intelligence
Security Incident

Merlin Lab Logic Vulnerability: $300.00K Reported Loss

·Historical incident record

Incident Overview

The hacking of the revenue aggregator Merlin Lab stems from a logical loophole in MerlinStrategyAlpacaBNB. The contract mistakenly uses the BNB transferred by the beneficiary as mining revenue, which makes the contract issue more MERL as a reward. After repeated operations, the attacker made a profit of 300,000 US dollars.

Sources & References

Original incident referencehttps://twitter.com/RugDocIO/status/1409821481941540866 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    THORChain

    Attack methodFalse top-up
    Reported loss$ 140,000
  2. Incident date
    Attack methodFlash loan attack
    Reported loss$ 250,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed