Security Incident
MALT Smart Contract Vulnerability: $72.00K Reported Loss
An attacker exploited a logic flaw in MALT’s swap function.
- Reported loss
- $ 72000
- Attack category
- Smart Contract Vulnerability
Incident Overview
With negligible input they triggered an external rebalanceHook that pulled DAI from the protocol’s Capital Source into the same pool. The swap then checked its invariant against the post-hook balances and treated the treasury-funded DAI as caller-supplied funds, allowing a disproportionate MALT withdrawal and a loss of about $ 72,000.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.