Leaderboard
1035All-time rank
MP

Meta Pool

Jun 17, 2025

$130K
Lost
$130K
Recovered
$0
Net loss
$130K
Unrecovered0% recovered

sol. An attacker called the public mint function to create 9,705 mpETH tokens (~$27M at face value) without depositing collateral, extracting only $130K due to low liquidity in affected pools.

How the exploit worked

View reproducible PoC

Infinite Mint via unvalidated ERC4626 mint.

Lost: 25k USD

Source: DeFiHackLabs (SunWeb3Sec)

Target
DeFi
Classification
Token & Share Accounting
Technique
Infinite Mint
Attribution
Unknown
Chains
Ethereum

Event timeline

  1. Jun 17, 2025
    Exploit executed — $130K drained via infinite mint
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents