37.96 million MANTRA Frozen, Attacker Transfers $3.6 Million in Tokens

MANTRA released a security incident report on August 20, revealing that attackers exploited an integer underflow vulnerability in the Cosmos EVM to transfer 72,092.4 million MANTRA tokens, equivalent to approximately $3.6 million at a rate of $0.005 per token. Of these, 60,000 million tokens came from a burn address, and 12,100 million tokens came from the genesis multisig address. The attack did not involve validator or administrator keys. The vulnerability was fixed on May 15 in the development branch and merged into the release branch on August 19. The first abnormal transfer occurred on August 21 at 11:06 (UTC+8), leading to the suspension of MANTRA Chain at 15:13 (UTC+8), and it was restarted on August 22 under version v8.4.0. Of the stolen funds, 68,300 million tokens have been sent to exchange deposit addresses, while the remaining 37.96 million tokens have been frozen, and the recovery of funds has entered the law enforcement investigation stage.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.