Makina hit by $5M flash-loan; DUSD Curve LP exploited Now!!!

Flash‑loan exploit drains ~$5.1M (1,299 ETH) from Makina’s DUSD Curve pool; BlockSec blames spot‑price valuation; MEV bot may have front‑run; SynapLogic hit for ~$186K.

  • Makina lost about $5 million after a flash loan attack targeted the DUSD liquidity pool on Curve Finance.
  • The attacker extracted 1,299 ether (about $4 million) to an address labeled MEV Builder, with most funds moved to a separate holding address.
  • Blockchain auditor BlockSec attributed the $5.1 million loss to using the pool’s spot price when valuing LP assets.
  • Security firm PeckShield reported an MEV bot may have front-run the original exploit.
  • A separate earlier incident hit SynapLogic, causing a reported $186,000 loss but limiting the attacker’s profit to about $88,000 because tokens could not be sold.

Makina confirmed a hack that affected its DUSD liquidity provider (LP) positions on Curve Finance, occurring early on January 20, 2026. The project said the issue was limited to the DUSD Curve pool and advised users to withdraw funds. See the Makina statement.

- Advertisement -

The on-chain attack transaction moved 1,299 ether (about $4 million) into an address labeled MEV Builder, with most funds later sent to a separate holding address.

Makina posted an on-chain message to the holder asking for return of the funds, offering a 10% bounty.

Analysis from BlockSec put the total loss at about $5.1 million USDC and identified the root cause as relying on the pool’s spot price when calculating LP asset value. BlockSec said the attacker used a flash loan — a short-term loan executed within one transaction to create temporary capital — to perform repeated large swaps and manipulate the LP share price.

Security watcher PeckShield reported that an MEV bot (a bot that seeks profitable transaction ordering opportunities) appears to have front-run the original exploit.

- Advertisement -

Earlier the same night, SynapLogic on the Base Network suffered a separate incident. Transaction data and BlockSec say a faulty validation allowed a loss of about $186,000, while researcher Weilin Lu reported the minted SYP tokens cannot be sold, limiting the attacker’s realized profit to roughly $88,000.

✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.

Previous Articles:

- Advertisement -

Latest News

Prediction Markets Soar to $63.5B but Face Wash Trading, Security Risks

Prediction market trading volume quadrupled to roughly $63.5 billion in 2025.Academic research suggests nearly...

PEPE Plunges 87% From Peak Amid Crypto Market Rout

The cryptocurrency market is experiencing a significant downturn, with Bitcoin hitting $62,000 and dragging...

Saylor Calls Bitcoin ‘Digital Capital,’ Downplays Volatility

Michael Saylor reframed Bitcoin's volatility as a feature that enables new financial systems, calling...

Bitcoin Faces “Darkest Days” After Key Indicator Hits 4-Year Low

Bitcoin's Mayer Multiple indicator has plunged to 0.65, a level last seen during the...

ZAST.AI Discovers 119 CVEs with AI, Raises $6M

ZAST.AI secured $6 million in Pre-A funding from Hillhouse Capital, bringing its total funding...

Must Read

Tutorial: How to Buy a Domain Name Permanently? (Super Easy)

Are you ready to establish a permanent online presence and you want to buy a domain forever?In this tutorial, we'll show you how to...
🔥 #AD Get 20% OFF any new 12 month hosting plan from Hostinger. Click here!