Makina hit by $5M flash-loan; DUSD Curve LP exploited Now!!!

Flash‑loan exploit drains ~$5.1M (1,299 ETH) from Makina’s DUSD Curve pool; BlockSec blames spot‑price valuation; MEV bot may have front‑run; SynapLogic hit for ~$186K.

  • Makina lost about $5 million after a flash loan attack targeted the DUSD liquidity pool on Curve Finance.
  • The attacker extracted 1,299 ether (about $4 million) to an address labeled MEV Builder, with most funds moved to a separate holding address.
  • Blockchain auditor BlockSec attributed the $5.1 million loss to using the pool’s spot price when valuing LP assets.
  • Security firm PeckShield reported an MEV bot may have front-run the original exploit.
  • A separate earlier incident hit SynapLogic, causing a reported $186,000 loss but limiting the attacker’s profit to about $88,000 because tokens could not be sold.

Makina confirmed a hack that affected its DUSD liquidity provider (LP) positions on Curve Finance, occurring early on January 20, 2026. The project said the issue was limited to the DUSD Curve pool and advised users to withdraw funds. See the Makina statement.

- Advertisement -

The on-chain attack transaction moved 1,299 ether (about $4 million) into an address labeled MEV Builder, with most funds later sent to a separate holding address.

Makina posted an on-chain message to the holder asking for return of the funds, offering a 10% bounty.

Analysis from BlockSec put the total loss at about $5.1 million USDC and identified the root cause as relying on the pool’s spot price when calculating LP asset value. BlockSec said the attacker used a flash loan — a short-term loan executed within one transaction to create temporary capital — to perform repeated large swaps and manipulate the LP share price.

Security watcher PeckShield reported that an MEV bot (a bot that seeks profitable transaction ordering opportunities) appears to have front-run the original exploit.

- Advertisement -

Earlier the same night, SynapLogic on the Base Network suffered a separate incident. Transaction data and BlockSec say a faulty validation allowed a loss of about $186,000, while researcher Weilin Lu reported the minted SYP tokens cannot be sold, limiting the attacker’s realized profit to roughly $88,000.

✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.

Previous Articles:

- Advertisement -

Latest News

Kraken Gets Fed Master Account, Banks Cry Foul

Kraken secured a Federal Reserve master account on Wednesday, becoming the first crypto bank...

Palihapitiya: Bitcoin’s Public Ledger A “Structural Failing”

Billionaire investor Chamath Palihapitiya argues Bitcoin has a "structural failing" in fungibility and privacy,...

Justin Sun’s Rednote Account Banned Amid Stock Drop

Tron founder Justin Sun has been banned from Rednote (Xiaohongshu), losing his last major...

BTC Death Cross Looms: Bullish Catalyst Needed to Save Rally

Bitcoin's price rally this week is confronting a stern technical warning that the broader...

New RFP Guide for AI Governance & Usage Control

Security leaders have new budgets for AI security but often lack clear requirements for...

Must Read

6 Best VPN Providers That Accept Monero

Privacy and anonymity are probably the most important things that we should all consider in today's internet era. Although there are a lot of...
🔥 #AD Get 20% OFF any new 12 month hosting plan from Hostinger. Click here!