Digital Asset
Intelligence
Security Incident · ETH Ecosystem

MUSystem Smart Contract Vulnerability: $36.90K Reported Loss

·Source-attributed incident record

Incident Overview

MUSystem’s deposit() counted the first-deposit bonus in both the immediate ETH refund and the user’s MUS allocation, while withdraw() allowed same-transaction redemption without capping returned ETH to the amount deposited. Sixteen fresh addresses repeated this cycle and drained ETH from the contract, causing about $36,900 in losses.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2105167166639407447 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 305,000
  2. Incident date
    Attack methodFake Chain / Bridge Scam
    Reported loss$ 2,000,000
  3. Incident date
    Attack methodFake Chain / Fake Bridge Scam
    Reported loss$ 2,000,000
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 538000
  5. Incident date
    Target

    MCN Labs

    Attack methodSmart Contract Vulnerability
    Reported loss$ 92,600