Hack history / 2026 / Hack or exploit
MCN Labs
Hack or exploit on Sep 30, 2026 · Smart Contract Vulnerability
ONE SOURCE · 1 SOURCE
Lost
$93K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,750
among thefts by dollars lost
What happened
The MCN Labs–related LPBonus contract used inconsistent MSN reserve values in reward accounting. Accrual updated the reward index with the reserve at that moment, while withdrawal applied a user weight based on the reserve at claim time. The attacker first lowered the reserve to ~89.33 MSN during accrual, then raised it to ~491.11 MSN before calling UserRemoveLp, allowing a newly registered LP to claim ~1,442,165.71 FIST against only ~940,041.61 FIST of intervening reward funding—about $92,600 in losses.
Details
- Date
- Sep 30, 2026
- Kind
- Hack or exploit
- Method
- Smart Contract Vulnerability
- How in
- Smart contract bug
- Target
- not stated
- Chains
- BNB Chain
Reported by
Related incidents
The personal X account of Nano Labs founder Jack Kong 2026 · Hack or exploit · undisclosed
Bitlight Labs X Account 2026 · Hack or exploit · undisclosed
Spectral Labs 2024 · Hack or exploit · $250K
Ethena Labs 2024 · Hack or exploit · undisclosed
SAT20 Labs 2024 · Hack or exploit · undisclosed
Bitlight Labs X Account 2026 · Hack or exploit · undisclosed
Spectral Labs 2024 · Hack or exploit · $250K
Ethena Labs 2024 · Hack or exploit · undisclosed
SAT20 Labs 2024 · Hack or exploit · undisclosed
Cite this page
SwanBluechip, "MCN Labs hack, Sep 30, 2026: $93K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht1c66393631/ (data as of 2026-11-01).