Security Incident · ETH Ecosystem
Mure Smart Contract Vulnerability: $11.70K Reported Loss
Mure’s MureDistribution proxy contract on Ethereum was exploited due to an access control vulnerability in signature validation.
- Reported loss
- $ 11,700
- Attack category
- Smart Contract Vulnerability
Incident Overview
The attacker supplied a malicious contract as the “signer source,” causing SignatureChecker to return true and bypass verification. This allowed draining 4.85M QUEST tokens (pre-approved to the proxy) via transferFrom, which were then swapped for ~5.45 ETH (~$11,700) on Uniswap. No user funds or main payment infrastructure were affected; it was a targeted logic flaw in one distribution contract.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.