Hack history / 2026 / Hack or exploit
MALT
Hack or exploit on Oct 3, 2026 · Smart Contract Vulnerability
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$72K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,828
among thefts by dollars lost
What happened
An attacker exploited a logic flaw in MALT’s swap function. With negligible input they triggered an external rebalanceHook that pulled DAI from the protocol’s Capital Source into the same pool. The swap then checked its invariant against the post-hook balances and treated the treasury-funded DAI as caller-supplied funds, allowing a disproportionate MALT withdrawal and a loss of about $ 72,000.
Details
- Date
- Oct 3, 2026
- Kind
- Hack or exploit
- Method
- Smart Contract Vulnerability
- How in
- Smart contract bug
- Target
- not stated
- Chains
- Polygon
Reported by
Related incidents
RsETHSafeModule 2026 · Hack or exploit · $7.7M
Third-party Gnosis Safe Module (SquidRouterModule) 2026 · Hack or exploit · $3.2M
Haedal Vault 2026 · Hack or exploit · $915K
NEM（NemTokenV2） 2026 · Hack or exploit · $822K
Butter Bridge 2026 · Hack or exploit · $180K
Third-party Gnosis Safe Module (SquidRouterModule) 2026 · Hack or exploit · $3.2M
Haedal Vault 2026 · Hack or exploit · $915K
NEM（NemTokenV2） 2026 · Hack or exploit · $822K
Butter Bridge 2026 · Hack or exploit · $180K
Cite this page
SwanBluechip, "MALT hack, Oct 3, 2026: $72K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htaabbaba9df/ (data as of 2026-10-31).