Moonwell
Hack or exploit on Mar 24, 2026 · Governance Attack
What happened
According to The Block, DeFi lending protocol Moonwell is facing a governance attack on its Moonriver deployment, where an unknown attacker spent approximately $1,800 to acquire 40 million MFAM tokens and managed to buy, propose, and pass a initial vote within just 11 minutes. The attacker is seeking to transfer administrative control of seven lending markets, the comptroller, and the oracle to a malicious contract, which would enable the extraction of roughly $1.08 million in user funds. Although the proposal reached a quorum early on, "No" votes have since taken the lead, and while the voting is set to continue until March 27, the final outcome remains dependent on the remaining votes and community coordination.
Details
- Date
- Mar 24, 2026
- Kind
- Hack or exploit
- Method
- Governance Attack
- How in
- Price, oracle and governance
- Target
- not stated
- Chains
- not stated
Reported by
Related incidents
Moonwell Lending 2026 · Hack or exploit · $1.8M
Moonwell Lending 2025 · Hack or exploit · $1M
SwanBluechip, "Moonwell hack, Mar 24, 2026: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht1dab172dc3/ (data as of 2026-11-01).