A security flaw in Abracadabra’s smart contracts has led to a major exploit, with a hacker draining around 6,262 ETH—valued at roughly $13 million—from the protocol’s liquidity pools.
The attack, identified as a flash loan exploit, was initially flagged by blockchain security firm PeckShield.
Abracadabra’s lending system, known as “cauldrons,” integrates with GMX liquidity pools to facilitate borrowing and lending. The hacker reportedly manipulated the liquidation process in the GMX V2 integration, exploiting a weakness that allowed them to extract funds from the protocol.
Blockchain researcher Weilin Li analyzed the incident, noting that the attacker used a flash loan to trigger self-liquidation. Flash loans, a DeFi feature allowing users to borrow funds without collateral as long as they are repaid within the same transaction block, played a key role in the exploit.
The attacker borrowed Abracadabra’s stablecoin, Magic Internet Money (MIM), and executed a multi-step strategy to convert the debt into cash, profiting from liquidation incentives.
Despite the breach, a GMX developer confirmed that the attack did not compromise GMX’s core contracts. The stolen funds were later transferred from Arbitrum to Ethereum.
This isn’t the first security incident for Abracadabra. In January 2024, another exploit targeting its MIM stablecoin led to a $6.5 million loss, raising concerns over the protocol’s ongoing vulnerabilities.
French police have arrested more than a dozen individuals, including minors, in connection with a string of crypto-related kidnapping cases that have shaken Paris in recent weeks.
A bizarre cyberattack involving the hacked Instagram account of hip-hop group Migos has surfaced, allegedly as part of an attempted extortion scheme aimed at Solana co-founder Raj Gokal.
An Italian man narrowly escaped a harrowing ordeal in New York after being kidnapped and tortured in an alleged scheme to extract access to his digital wealth.
A federal judge has thrown out major fraud charges against Avraham Eisenberg, the trader accused of draining millions from DeFi platform Mango Markets, citing jurisdictional flaws in the government’s case.