Abracadabra loses $1.8 million in protocol's third major DeFi hack since 2024
Quick Take A hacker stole nearly $1.8 million worth of DeFi lending protocol Abracadabra’s decentralized stablecoin Magic Internet Money. The attacker manipulated a solvency check flaw in one of the protocol’s functions to borrow more tokens than collateral allowed. The attack is the third major hack that Abracadabra has suffered since the start of 2024, with over $21 million in total losses over the three incidents. Abracadabra said it would buy back the stolen stablecoins using DAO treasury funds, and th
Abracadabra, a DeFi lending protocol which also issues the decentralized Magic Internet Money (MIM) stablecoin, lost nearly $1.8 million worth of MIM after an attacker exploited a flaw in one of the protocol's functions.
In the attack, which occurred late Saturday night, an unknown threat actor leveraged a smart contract vulnerability to bypass solvency checks, allowing them to extract 1.79 million MIM from the protocol, according to security firm BlockSec Phalcon . The attack wallet's initial funding came from mixing protocol Tornado Cash; following the attack, the attacker swapped the tokens for ETH and sent it back to Tornado.
"A potential attack vector was identified today in some deprecated contracts. The issue has been mitigated and closed," DAO contributor 0xMerlin wrote on the protocol's Discord server . "The affected MIM (although minimal) was bought back from the market using the DAO treasury and is currently awaiting repayment to the DAO treasury in ETH...No user funds have been affected."
MIM currently has a circulating supply of nearly 44 million tokens, according to Abracadabra's data , with most of the tokens trading on Ethereum and its Layer 2 network Arbitrum. The protocol has a total value locked (TVL) figure of $154 million.
The attack marks the third major security incident for the lending protocol. Abracadabra lost $6.4 million to a smart contract hack that also managed to bypass insolvency checks in January 2024, and a hacker stole $13 million worth of MIM in March 2025 with a seven-step flash loan attack. Altogether, the protocol has lost over $21 million in funds since 2024 to exploits.
0xMerlin also said the Abracadabra team is reviewing internal processes in order to strengthen the protocol and prevent similar issues from arising in the future. Abracadabra could not be immediately reached for comment by The Block, and the team has not yet issued a public-facing statement.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Bitcoin News Update: Traditional Finance Tightens Grip: MSCI Faces $8.8B Crypto Withdrawal Risk
- MSCI plans to exclude firms holding over 50% crypto assets from major indexes starting January 2026, risking $8.8B in potential sell-offs if adopted widely. - MicroStrategy (MSTR), holding 90% of assets in Bitcoin , faces forced institutional sell-offs as the most exposed company under the proposed rule. - Institutional investors show divided reactions: FourThought increased MSCI stakes while Prudential cut holdings by 59.6% amid governance debates. - JP Morgan's $2.8B MSTR outflow estimate triggered soc
Regulators Adjust Cryptocurrency Regulations as International Standards Address Gaps
- UK expands CARF to include domestic crypto transactions by 2026, aligning with OECD standards to close compliance loopholes and prevent "off-CRS" classification. - GeeFi's 80% presale completion with 700+ investors highlights its multi-chain wallet utility, contrasting speculative projects like Avalanche's volatile price forecasts. - Global regulators tighten crypto oversight (South Korea's cold wallet seizures, Spain's 47% gain tax), favoring utility-focused projects like GeeFi that prioritize complianc
Dogecoin News Today: With ETFs Driving Meme Coin Growth, Institutional Support is Transforming the Future of Altcoins
- Avalanche (AVAX) gains institutional traction as Securitize secures EU approval to deploy its digital-asset platform on the blockchain, enabling cross-border trading via Avalanche's scalable infrastructure. - Dogecoin (DOGE) surges 2.2% post-Grayscale ETF launch, generating $1.5B trading volume and signaling growing institutional interest in meme coins despite structural limitations. - Litecoin (LTC) approaches key $97.33 resistance, with analysts predicting a potential 33% rally if it breaks out of a co
Solana News Update: CoinShares Withdraws from U.S. Altcoin ETFs, Shifts Focus to Thematic Approaches as Major Players Take Lead
- CoinShares exits U.S. altcoin ETF market for Solana , XRP , and Litecoin , shifting focus to thematic crypto strategies amid institutional dominance. - CEO cites 90% inflow capture by giants like BlackRock , leaving smaller firms disadvantaged in saturated U.S. crypto ETF landscape. - Strategic pivot aligns with $1.2B SPAC merger plans and aims to leverage $10B AUM for cross-asset, active strategies targeting institutional investors. - Market analysts note the move could reshape ETF competition, emphasiz
Trending news
MoreCrypto prices
More
