The post Abracadabra appears to have been hacked for the third time in two years appeared on BitcoinEthereumNews.com. Abracadabra Money, an omnichain DeFi lending platform behind the Magic Internet Money (MIM) stablecoin, has reportedly suffered another exploit resulting in the loss of roughly $1.7 million in digital assets.  The claim, posted by several researchers on X, marks the latest security incident for the project, which has previously been targeted by hackers. According to Vladimir S., a blockchain threat researcher with the X handle, @officer_cia, the protocol was drained of $1.7 million before the attacker transferred the stolen funds into Tornado Cash. The researcher’s claim followed an earlier post on X  by Weilin William Li (@hklst4r), who had flagged the incident as a vulnerability in Abracadabra’s smart contracts but stopped short of confirming the exploit at the time. Vulnerability in ‘solvency check’ logic Li said the suspected attacker may have exploited a flaw in the protocol’s logic that allowed them to bypass a solvency check, a safeguard designed to ensure that borrowers cannot withdraw more funds than they are entitled to. “It seems Abracadabra @MIM_Spell is hacked again,” Li wrote. “This time a more obvious vulnerability, where an ‘else’ branch clears the status variables and sets ‘needSolvencyCheck’ to false by default.” Li also implied that Abracadabra Money was already aware of the situation as he wrote “They have paused all their contracts now,” while cautioning that his findings were preliminary and could be subject to revision. Abracadabra Money is a familiar target for hackers If confirmed, this would be the third exploit the platform has suffered in roughly two years. The first was in January 2024, when it suffered a $6.49 million exploit. That exploit caused its MIM stablecoin to lose its peg to the US dollar. The second exploit occurred in March 2025; the protocol lost an estimated $13 million after attackers exploited vulnerabilities in its “cauldron” smart… The post Abracadabra appears to have been hacked for the third time in two years appeared on BitcoinEthereumNews.com. Abracadabra Money, an omnichain DeFi lending platform behind the Magic Internet Money (MIM) stablecoin, has reportedly suffered another exploit resulting in the loss of roughly $1.7 million in digital assets.  The claim, posted by several researchers on X, marks the latest security incident for the project, which has previously been targeted by hackers. According to Vladimir S., a blockchain threat researcher with the X handle, @officer_cia, the protocol was drained of $1.7 million before the attacker transferred the stolen funds into Tornado Cash. The researcher’s claim followed an earlier post on X  by Weilin William Li (@hklst4r), who had flagged the incident as a vulnerability in Abracadabra’s smart contracts but stopped short of confirming the exploit at the time. Vulnerability in ‘solvency check’ logic Li said the suspected attacker may have exploited a flaw in the protocol’s logic that allowed them to bypass a solvency check, a safeguard designed to ensure that borrowers cannot withdraw more funds than they are entitled to. “It seems Abracadabra @MIM_Spell is hacked again,” Li wrote. “This time a more obvious vulnerability, where an ‘else’ branch clears the status variables and sets ‘needSolvencyCheck’ to false by default.” Li also implied that Abracadabra Money was already aware of the situation as he wrote “They have paused all their contracts now,” while cautioning that his findings were preliminary and could be subject to revision. Abracadabra Money is a familiar target for hackers If confirmed, this would be the third exploit the platform has suffered in roughly two years. The first was in January 2024, when it suffered a $6.49 million exploit. That exploit caused its MIM stablecoin to lose its peg to the US dollar. The second exploit occurred in March 2025; the protocol lost an estimated $13 million after attackers exploited vulnerabilities in its “cauldron” smart…

Abracadabra appears to have been hacked for the third time in two years

2025/10/05 03:59
3분 읽기
이 콘텐츠에 대한 의견이나 우려 사항이 있으시면 crypto.news@mexc.com으로 연락주시기 바랍니다

Abracadabra Money, an omnichain DeFi lending platform behind the Magic Internet Money (MIM) stablecoin, has reportedly suffered another exploit resulting in the loss of roughly $1.7 million in digital assets. 

The claim, posted by several researchers on X, marks the latest security incident for the project, which has previously been targeted by hackers.

According to Vladimir S., a blockchain threat researcher with the X handle, @officer_cia, the protocol was drained of $1.7 million before the attacker transferred the stolen funds into Tornado Cash.

The researcher’s claim followed an earlier post on X  by Weilin William Li (@hklst4r), who had flagged the incident as a vulnerability in Abracadabra’s smart contracts but stopped short of confirming the exploit at the time.

Vulnerability in ‘solvency check’ logic

Li said the suspected attacker may have exploited a flaw in the protocol’s logic that allowed them to bypass a solvency check, a safeguard designed to ensure that borrowers cannot withdraw more funds than they are entitled to.

“It seems Abracadabra @MIM_Spell is hacked again,” Li wrote. “This time a more obvious vulnerability, where an ‘else’ branch clears the status variables and sets ‘needSolvencyCheck’ to false by default.”

Li also implied that Abracadabra Money was already aware of the situation as he wrote “They have paused all their contracts now,” while cautioning that his findings were preliminary and could be subject to revision.

Abracadabra Money is a familiar target for hackers

If confirmed, this would be the third exploit the platform has suffered in roughly two years. The first was in January 2024, when it suffered a $6.49 million exploit. That exploit caused its MIM stablecoin to lose its peg to the US dollar.

The second exploit occurred in March 2025; the protocol lost an estimated $13 million after attackers exploited vulnerabilities in its “cauldron” smart contracts tied to GMX. That’s the largest breach the platform has suffered to date, and it caused Abracadabra to pause borrowing across its ecosystem and offered a 20% bounty to the hackers for the safe return of funds.

DeFi’s persistent security challenges

Abracadabra Money’s recurring vulnerabilities have drawn criticism from parts of the DeFi community.

The relatively modest amount involved, $1.7 million compared to earlier multi-million-dollar DeFi exploits, may indicate a partial drain or that the vulnerability was discovered and mitigated before further damage occurred. 

An estimated $307 million is reported to have been stolen from crypto platforms globally in the third quarter (Q3) of 2025, with DeFi exploits coming second after centralized exchanges, according to data shared by CertiK. 

This is an improvement to the figures that were lost to exploits in Q2 and Q1. This year alone has seen over $3 billion lost to hacks. With Q4 just starting, Abracadabra Money is one of the first casualties of the quarter.

As of the time of writing, Abracadabra Money has yet to issue an official statement addressing the reported exploit.

Get seen where it counts. Advertise in Cryptopolitan Research and reach crypto’s sharpest investors and builders.

Source: https://www.cryptopolitan.com/abracadabra-money-hit-suspected-hack/

시장 기회
DeFi 로고
DeFi 가격(DEFI)
$0.0002828
$0.0002828$0.0002828
+1.14%
USD
DeFi (DEFI) 실시간 가격 차트
면책 조항: 본 사이트에 재게시된 글들은 공개 플랫폼에서 가져온 것으로 정보 제공 목적으로만 제공됩니다. 이는 반드시 MEXC의 견해를 반영하는 것은 아닙니다. 모든 권리는 원저자에게 있습니다. 제3자의 권리를 침해하는 콘텐츠가 있다고 판단될 경우, crypto.news@mexc.com으로 연락하여 삭제 요청을 해주시기 바랍니다. MEXC는 콘텐츠의 정확성, 완전성 또는 시의적절성에 대해 어떠한 보증도 하지 않으며, 제공된 정보에 기반하여 취해진 어떠한 조치에 대해서도 책임을 지지 않습니다. 본 콘텐츠는 금융, 법률 또는 기타 전문적인 조언을 구성하지 않으며, MEXC의 추천이나 보증으로 간주되어서는 안 됩니다.

USD1 Genesis: 0 Fees + 12% APR

USD1 Genesis: 0 Fees + 12% APRUSD1 Genesis: 0 Fees + 12% APR

New users: stake for up to 600% APR. Limited time!