Hack history / 2025 / Hack or exploit
Abracadabra Spell
Hack or exploit on Oct 4, 2025 · Improper Access Control
IN REVIEWSOURCES AGREE ON DATE AND LOSS · 5 SOURCES
Lost
$1.8M
sources: $1.7M to $1.8M
Returned
none listed
as the sources state it
Rank
#737
among thefts by dollars lost
What happened
On October 4, 2025 Abracadabra Money on Ethereum suffered a critical exploit of the cook() multi-action function where improper state handling allowed attackers to bypass solvency checks: Action 5 set needsSolvencyCheck=true, but Action 0 reset the CookStatus, enabling under-collateralized borrowing and withdrawal of 1.79 million MIM tokens.
In review: possible duplicate within one source.
Details
- Date
- Oct 4, 2025
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
Related incidents
Abracadabra Spell 2025 · Hack or exploit · $13M
Abracadabra Spell 2024 · Hack or exploit · $6.5M
Cork V1 2025 · Hack or exploit · $12M
ForceBridge 2025 · Hack or exploit · $3.9M
Ribbon 2025 · Hack or exploit · $2.7M
Abracadabra Spell 2024 · Hack or exploit · $6.5M
Cork V1 2025 · Hack or exploit · $12M
ForceBridge 2025 · Hack or exploit · $3.9M
Ribbon 2025 · Hack or exploit · $2.7M
Cite this page
SwanBluechip, "Abracadabra Spell hack, Oct 4, 2025: $1.8M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht6105f31cc1/ (data as of 2026-11-01).