Leaderboard
1324All-time rank
M
Mure
May 23, 2026
$12K
Lost
$12K
Recovered
$0
Net loss
$12K
Unrecovered0% recovered
Mure's MureDistribution proxy on Ethereum was drained in a single transaction on 21 May 2026 after a caller-controlled signer address was passed to SignatureChecker, causing it to fall through to the ERC-1271 path and return true for a forged signature. 7K).
How the exploit worked
View reproducible PoCSignature Verification Bypass.
Lost: ~5.45 ETH
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Input Validation
- Technique
- Signature Verification Flaw
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- May 23, 2026Exploit executed — $12K drained via signature verification flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)