Abracadabra Faces Third Hack, $1.8 Million Loss, and Contract Pause
ByAinvest
Sunday, Oct 5, 2025 3:48 pm ET1min read
TORN--
The attack leveraged a vulnerability in one of Abracadabra's smart contracts, allowing an unknown threat actor to bypass solvency checks and extract 1.79 million MIM tokens. The attacker initially funded their operations using Tornado Cash, a protocol known for its privacy features, and subsequently swapped the tokens for ETH before returning the funds to Tornado Cash [2].
Abracadabra's decentralized autonomous organization (DAO) swiftly responded to the incident. A DAO contributor, 0xMerlin, reported that the issue had been identified and mitigated, with the affected MIM tokens bought back from the market using DAO treasury funds. No user funds were affected, according to the protocol's official statement on its Discord server [1].
The latest hack underscores the ongoing security challenges in the DeFi space. Abracadabra's cumulative losses since 2024, totaling over $21 million, highlight the urgency for the protocol to strengthen its risk controls and enhance communication strategies to mitigate investor losses and restore market trust [1]. The protocol's total value locked (TVL) stands at $154 million, with most of the MIM tokens trading on Ethereum and its Layer 2 network, Arbitrum [2].
ETH--
ARB--
Abracadabra, a DeFi protocol, has suffered its third major hack since 2024, resulting in a $1.8 million loss. The attack exploited MIM tokens and used multiple addresses to breach the protocol's smart contracts. The hack highlights ongoing security challenges in DeFi, impacting market trust and prompting urgent protocol responses to mitigate investor losses. Abracadabra needs to bolster risk controls and enhance communications to navigate continuous vulnerabilities.
Abracadabra, a prominent DeFi lending protocol, has once again fallen victim to a significant security breach. The latest hack, which occurred late Saturday night, resulted in the loss of nearly $1.8 million worth of Magic Internet Money (MIM) stablecoins. This incident marks the third major security exploit targeting the protocol since the beginning of 2024, with cumulative losses exceeding $21 million [1].The attack leveraged a vulnerability in one of Abracadabra's smart contracts, allowing an unknown threat actor to bypass solvency checks and extract 1.79 million MIM tokens. The attacker initially funded their operations using Tornado Cash, a protocol known for its privacy features, and subsequently swapped the tokens for ETH before returning the funds to Tornado Cash [2].
Abracadabra's decentralized autonomous organization (DAO) swiftly responded to the incident. A DAO contributor, 0xMerlin, reported that the issue had been identified and mitigated, with the affected MIM tokens bought back from the market using DAO treasury funds. No user funds were affected, according to the protocol's official statement on its Discord server [1].
The latest hack underscores the ongoing security challenges in the DeFi space. Abracadabra's cumulative losses since 2024, totaling over $21 million, highlight the urgency for the protocol to strengthen its risk controls and enhance communication strategies to mitigate investor losses and restore market trust [1]. The protocol's total value locked (TVL) stands at $154 million, with most of the MIM tokens trading on Ethereum and its Layer 2 network, Arbitrum [2].

Stay ahead of the market.
Get curated U.S. market news, insights and key dates delivered to your inbox.
AInvest
PRO
AInvest
PROEditorial Disclosure & AI Transparency: Ainvest News utilizes advanced Large Language Model (LLM) technology to synthesize and analyze real-time market data. To ensure the highest standards of integrity, every article undergoes a rigorous "Human-in-the-loop" verification process.
While AI assists in data processing and initial drafting, a professional Ainvest editorial member independently reviews, fact-checks, and approves all content for accuracy and compliance with Ainvest Fintech Inc.’s editorial standards. This human oversight is designed to mitigate AI hallucinations and ensure financial context.
Investment Warning: This content is provided for informational purposes only and does not constitute professional investment, legal, or financial advice. Markets involve inherent risks. Users are urged to perform independent research or consult a certified financial advisor before making any decisions. Ainvest Fintech Inc. disclaims all liability for actions taken based on this information. Found an error?Report an Issue



Comments
No comments yet