Hack history / 2026 / Hack or exploit
MUSystem
Hack or exploit on Sep 30, 2026 · Smart Contract Vulnerability
ONE SOURCE · 1 SOURCE
Lost
$37K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,994
among thefts by dollars lost
What happened
MUSystem’s deposit() counted the first-deposit bonus in both the immediate ETH refund and the user’s MUS allocation, while withdraw() allowed same-transaction redemption without capping returned ETH to the amount deposited. Sixteen fresh addresses repeated this cycle and drained ETH from the contract, causing about $36,900 in losses.
Details
- Date
- Sep 30, 2026
- Kind
- Hack or exploit
- Method
- Smart Contract Vulnerability
- How in
- Smart contract bug
- Target
- not stated
- Chains
- Ethereum
Reported by
Related incidents
RsETHSafeModule 2026 · Hack or exploit · $7.7M
Third-party Gnosis Safe Module (SquidRouterModule) 2026 · Hack or exploit · $3.2M
Haedal Vault 2026 · Hack or exploit · $915K
NEM（NemTokenV2） 2026 · Hack or exploit · $822K
Butter Bridge 2026 · Hack or exploit · $180K
Third-party Gnosis Safe Module (SquidRouterModule) 2026 · Hack or exploit · $3.2M
Haedal Vault 2026 · Hack or exploit · $915K
NEM（NemTokenV2） 2026 · Hack or exploit · $822K
Butter Bridge 2026 · Hack or exploit · $180K
Cite this page
SwanBluechip, "MUSystem hack, Sep 30, 2026: $37K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht982e6c79f1/ (data as of 2026-11-01).