Hack history / 2025 / Hack or exploit
Mosca
Hack or exploit on Jan 6, 2025 · Incorrect Share Accounting
ATTACK TX CONFIRMED ON CHAININ REVIEWSOURCES DISAGREE ON DATE OR LOSS · 3 SOURCES
Lost
$38K
sources: $20K to $38K
Returned
none listed
as the sources state it
Rank
#1,990
among thefts by dollars lost
What happened
Mosca is an on-chain MLM/membership program where users join by depositing USDT, BUSD, or USDC for internal credits to withdraw later. The exitProgram function had incomplete state resets—only user.balance was zeroed after withdrawal but not user.balanceUSDT and user.balanceUSDC, enabling repeated withdrawals of the same funds from these alternate balance fields.
In review: possible duplicate within one source; sources disagree on the loss.
Details
- Date
- Jan 6, 2025
- Kind
- Hack or exploit
- Method
- Incorrect Share Accounting
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- BNB Chain
Reported by
Related incidents
Yearn Ether 2025 · Hack or exploit · $9M
Future Protocol 2025 · Hack or exploit · $4.6M
Astera.fi 2025 · Hack or exploit · $573K
numa. 2025 · Hack or exploit · $313K
Mosca2 2025 · Hack or exploit · $38K
Future Protocol 2025 · Hack or exploit · $4.6M
Astera.fi 2025 · Hack or exploit · $573K
numa. 2025 · Hack or exploit · $313K
Mosca2 2025 · Hack or exploit · $38K
Cite this page
SwanBluechip, "Mosca hack, Jan 6, 2025: $38K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht58758679fc/ (data as of 2026-10-31).