Abracadabra loses $1.8 million in protocol's third major DeFi hack since 2024
Quick Take A hacker stole nearly $1.8 million worth of DeFi lending protocol Abracadabra’s decentralized stablecoin Magic Internet Money. The attacker manipulated a solvency check flaw in one of the protocol’s functions to borrow more tokens than collateral allowed. The attack is the third major hack that Abracadabra has suffered since the start of 2024, with over $21 million in total losses over the three incidents. Abracadabra said it would buy back the stolen stablecoins using DAO treasury funds, and th
Abracadabra, a DeFi lending protocol which also issues the decentralized Magic Internet Money (MIM) stablecoin, lost nearly $1.8 million worth of MIM after an attacker exploited a flaw in one of the protocol's functions.
In the attack, which occurred late Saturday night, an unknown threat actor leveraged a smart contract vulnerability to bypass solvency checks, allowing them to extract 1.79 million MIM from the protocol, according to security firm BlockSec Phalcon . The attack wallet's initial funding came from mixing protocol Tornado Cash; following the attack, the attacker swapped the tokens for ETH and sent it back to Tornado.
"A potential attack vector was identified today in some deprecated contracts. The issue has been mitigated and closed," DAO contributor 0xMerlin wrote on the protocol's Discord server . "The affected MIM (although minimal) was bought back from the market using the DAO treasury and is currently awaiting repayment to the DAO treasury in ETH...No user funds have been affected."
MIM currently has a circulating supply of nearly 44 million tokens, according to Abracadabra's data , with most of the tokens trading on Ethereum and its Layer 2 network Arbitrum. The protocol has a total value locked (TVL) figure of $154 million.
The attack marks the third major security incident for the lending protocol. Abracadabra lost $6.4 million to a smart contract hack that also managed to bypass insolvency checks in January 2024, and a hacker stole $13 million worth of MIM in March 2025 with a seven-step flash loan attack. Altogether, the protocol has lost over $21 million in funds since 2024 to exploits.
0xMerlin also said the Abracadabra team is reviewing internal processes in order to strengthen the protocol and prevent similar issues from arising in the future. Abracadabra could not be immediately reached for comment by The Block, and the team has not yet issued a public-facing statement.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Bitcoin Leverage Liquidation and the Dangers of Excessive Exposure in Unstable Markets
- Bitcoin's leveraged derivatives markets face recurring liquidation crises, exemplified by the 2025 crash wiping $19B in a single day. - Historical events (2020, 2022, 2025) reveal systemic risks from overexposure, exacerbated by absent safeguards and retail investor herd behavior. - Behavioral biases like overconfidence and FOMO drive excessive leverage, while opaque market mechanisms amplify panic selling during downturns. - Institutional strategies (CORM model, hedging derivatives) and disciplined risk
The Untapped Potential for Infrastructure Investment in Upstate New York
- Upstate NY's Webster is transforming via $9.8M FAST NY grants, turning brownfields into a 300-acre industrial hub with upgraded infrastructure. - Xerox campus redevelopment and road projects boosted 250 jobs at fairlife® dairy, while industrial vacancy rates dropped to 2% vs. 6.5% national average. - Investors gain exposure through ETFs like IQRA/REAI or direct land acquisitions near power-ready sites, leveraging state-funded shovel-ready industrial corridors. - Governor Hochul's strategy positions Upsta
Turkmenistan’s 2026 Cryptocurrency Strategy: Government-Led Diversification Under Strict Oversight
- Turkmenistan will implement a 2026 crypto law under President Berdimuhamedov, establishing licensing, AML rules, and state control over digital assets to diversify its gas-dependent economy. - The law mandates mining registration, classifies tokens as "backed/unbacked," and grants the central bank authority over distributed ledgers, prioritizing surveillance over privacy. - While aligning with regional crypto trends, the strict regulatory framework risks deterring private investment due to state oversigh
Bitcoin’s Latest Price Drop: The Result of Shifting Macro Policies and Changing Institutional Attitudes
- Bitcoin fell 33% in late 2025 after hitting $126,080, driven by Fed policy shifts and institutional outflows. - Fed hesitation over rate cuts and delayed jobs data reduced December cut odds, triggering risk-off sentiment. - $3.79B ETF outflows and Solana migration highlighted Bitcoin's liquidity sensitivity amid regulatory uncertainty. - S&P 500 declines and $2B in futures liquidations amplified Bitcoin's November selloff amid macro-institutional convergence. - Long-term adoption by Harvard/Metaplanet an
Trending news
MoreCrypto prices
More
