Leaderboard
1042All-time rank
ME

Molt EVM

Mar 7, 2026

$127K
Lost
$127K
Recovered
$0
Net loss
$127K
Unrecovered0% recovered

On March 7, 2026, Molt EVM on Base was exploited for ~$127K via missing access control on the setSpawnerToken() function. The attacker overwrote the authorized spawner with their own contract, then called the protected spawnTokens() function to mint 100 million mEVM tokens at zero cost and swapped them for WETH.

Target
Other
Classification
Access Control
Technique
Improper Access Control
Attribution
Unknown
Chains
Base

Event timeline

  1. Mar 7, 2026
    Exploit executed — $127K drained via improper access control
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents