Moonwell DeFi Protocol Suffers $8.79 Million Attack
Moonwell, a DeFi lending protocol, was exploited resulting in a loss of $8.79 million. The attacker manipulated a low-liquidity token to borrow real assets from the platform.
Moonwell, a DeFi lending protocol, experienced a security incident where an attacker inflated the price of a low-liquidity token, MAMO. This inflated price was then used as collateral to borrow real assets, including cbBTC and USDC, from various markets such as mCBTC and mUSDC. Initial reports indicated that approximately 50.6 cbBTC, valued at over $4 million, was drained from the protocol.
Subsequent updates revealed that the total outflows from the attack reached about $8.79 million. The mechanism involved leveraging the inflated token price to secure loans against actual assets, which were then withdrawn from the protocol. The specific blockchain on which this incident occurred was not stated, leaving the tracing of the assets unclear.
The on-chain record does not provide specific addresses related to the incident, limiting further analysis of the transaction flow. The incident underscores the vulnerabilities that can exist in DeFi protocols, particularly those involving low-liquidity tokens.