Hack history / 2026 / Hack or exploit
MoneyMon
Hack or exploit on May 28, 2026 · Smart Contract Vulnerability
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$86K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,791
among thefts by dollars lost
What happened
The LegendaryMoneyMonNft contract’s cliamRewred function had a signature verification flaw. The verify() only checked if recoverSigner(...) == admin, without properly validating cases where ecrecover returns address(0). The attacker set admin to zero address, then used an invalid signature (r=0, s=0, v=27) to bypass checks, arbitrarily claim rewards, drain all tokens from the contract, and swap them for USDT via PancakeSwap.
Details
- Date
- May 28, 2026
- Kind
- Hack or exploit
- Method
- Smart Contract Vulnerability
- How in
- Keys, accounts and infrastructure
- Target
- not stated
- Chains
- not stated
Reported by
Related incidents
RsETHSafeModule 2026 · Hack or exploit · $7.7M
Third-party Gnosis Safe Module (SquidRouterModule) 2026 · Hack or exploit · $3.2M
Haedal Vault 2026 · Hack or exploit · $915K
NEM（NemTokenV2） 2026 · Hack or exploit · $822K
Butter Bridge 2026 · Hack or exploit · $180K
Third-party Gnosis Safe Module (SquidRouterModule) 2026 · Hack or exploit · $3.2M
Haedal Vault 2026 · Hack or exploit · $915K
NEM（NemTokenV2） 2026 · Hack or exploit · $822K
Butter Bridge 2026 · Hack or exploit · $180K
Cite this page
SwanBluechip, "MoneyMon hack, May 28, 2026: $86K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht9c56a1a5f5/ (data as of 2026-10-31).