Hack history / 2025 / Hack or exploit
Malda
Hack or exploit on May 30, 2025 · Contract Vulnerability
ONE SOURCE · 1 SOURCE
Lost
$285K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,347
among thefts by dollars lost
What happened
The vulnerability originated in the Migrator.sol contract. The contract allowed the Mendi Comptroller address to be passed dynamically, rather than being hardcoded. This enabled the attacker to supply their own malicious Comptroller, mint a synthetic position on Malda, and withdraw approximately $285,000.
Details
- Date
- May 30, 2025
- Kind
- Hack or exploit
- Method
- Contract Vulnerability
- How in
- Smart contract bug
- Target
- not stated
- Chains
- not stated
Reported by
Related incidents
Cite this page
SwanBluechip, "Malda hack, May 30, 2025: $285K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htfc8b775109/ (data as of 2026-10-31).