Security Incident
MCN Labs Smart Contract Vulnerability: $92.60K Reported Loss
The MCN Labs–related LPBonus contract used inconsistent MSN reserve values in reward accounting.
- Reported loss
- $ 92,600
- Attack category
- Smart Contract Vulnerability
Incident Overview
Accrual updated the reward index with the reserve at that moment, while withdrawal applied a user weight based on the reserve at claim time. The attacker first lowered the reserve to ~89.33 MSN during accrual, then raised it to ~491.11 MSN before calling UserRemoveLp, allowing a newly registered LP to claim ~1,442,165.71 FIST against only ~940,041.61 FIST of intervening reward funding—about $92,600 in losses.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.