Leaderboard
1042All-time rank
ME
Molt EVM
Mar 7, 2026
$127K
Lost
$127K
Recovered
$0
Net loss
$127K
Unrecovered0% recovered
On March 7, 2026, Molt EVM on Base was exploited for ~$127K via missing access control on the setSpawnerToken() function. The attacker overwrote the authorized spawner with their own contract, then called the protected spawnTokens() function to mint 100 million mEVM tokens at zero cost and swapped them for WETH.
- Target
- Other
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
Base
Event timeline
- Mar 7, 2026Exploit executed — $127K drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%
