Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Mure Smart Contract Vulnerability: $11.70K Reported Loss

·Historical incident record

Incident Overview

Mure’s MureDistribution proxy contract on Ethereum was exploited due to an access control vulnerability in signature validation. The attacker supplied a malicious contract as the “signer source,” causing SignatureChecker to return true and bypass verification. This allowed draining 4.85M QUEST tokens (pre-approved to the proxy) via transferFrom, which were then swapped for ~5.45 ETH (~$11,700) on Uniswap. No user funds or main payment infrastructure were affected; it was a targeted logic flaw in one distribution contract.

Sources & References

Original incident referencehttps://x.com/clarahacks/status/2058341669603307880 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    StablR

    Attack methodPrivate Key Leakage
    Reported loss$ 2,800,000
  2. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 3,200,000
  3. Incident date
    Attack methodSybil Attack
    Reported loss$ 200,000
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 180,000
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 13,700