Makina hit by $5M flash-loan; DUSD Curve LP exploited Now!!!

Flash‑loan exploit drains ~$5.1M (1,299 ETH) from Makina’s DUSD Curve pool; BlockSec blames spot‑price valuation; MEV bot may have front‑run; SynapLogic hit for ~$186K.

  • Makina lost about $5 million after a flash loan attack targeted the DUSD liquidity pool on Curve Finance.
  • The attacker extracted 1,299 ether (about $4 million) to an address labeled MEV Builder, with most funds moved to a separate holding address.
  • Blockchain auditor BlockSec attributed the $5.1 million loss to using the pool’s spot price when valuing LP assets.
  • Security firm PeckShield reported an MEV bot may have front-run the original exploit.
  • A separate earlier incident hit SynapLogic, causing a reported $186,000 loss but limiting the attacker’s profit to about $88,000 because tokens could not be sold.

Makina confirmed a hack that affected its DUSD liquidity provider (LP) positions on Curve Finance, occurring early on January 20, 2026. The project said the issue was limited to the DUSD Curve pool and advised users to withdraw funds. See the Makina statement.

- Advertisement -

The on-chain attack transaction moved 1,299 ether (about $4 million) into an address labeled MEV Builder, with most funds later sent to a separate holding address.

Makina posted an on-chain message to the holder asking for return of the funds, offering a 10% bounty.

Analysis from BlockSec put the total loss at about $5.1 million USDC and identified the root cause as relying on the pool’s spot price when calculating LP asset value. BlockSec said the attacker used a flash loan — a short-term loan executed within one transaction to create temporary capital — to perform repeated large swaps and manipulate the LP share price.

Security watcher PeckShield reported that an MEV bot (a bot that seeks profitable transaction ordering opportunities) appears to have front-run the original exploit.

- Advertisement -

Earlier the same night, SynapLogic on the Base Network suffered a separate incident. Transaction data and BlockSec say a faulty validation allowed a loss of about $186,000, while researcher Weilin Lu reported the minted SYP tokens cannot be sold, limiting the attacker’s realized profit to roughly $88,000.

✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.

Previous Articles:

- Advertisement -

Latest News

Hong Kong CEO Touts City as Web3 Hub, Stablecoin Licenses Soon

Hong Kong's Chief Executive, John KC Lee, has declared the city's goal to become...

Ray Dalio Warns of Government Control via CBDCs

Ray Dalio warns CBDCs grant governments sweeping transaction monitoring and policy enforcement powers.He argues...

LSEG, Apex Group to tokenize private funds by 2026

First paragraph: A compelling hook combining who, what, when, where.LSEG and Apex Group launch...

Justin Sun’s Ex Says X Account Suspended Over Mass Reports

An X account belonging to Justin Sun's alleged former girlfriend, Zeng Ying, was suspended...

Dollar Could Fall 10% on Aggressive Fed Cuts

State Street strategists warn the US dollar could fall up to 10% if the...

Must Read

Top 10 Best DeFi Tokens to Invest in 2022

Decentralized Finance (Defi), is one of the most talked-about topics in the crypto space alongside NFTs. So if you want to know the best...
🔥 #AD Get 20% OFF any new 12 month hosting plan from Hostinger. Click here!