TREE NEWS update: Moonwell, a DeFi lending protocol, lost $8.7 million on Base after an attacker bypassed its supply cap by depositing once and then sending 53 million tokens directly to the market, inflating the value of their shares about 3.7-fold. The exploit highlights vulnerabilities in supply cap mechanisms.
Moonwell Loses $8.7M on Base in Supply Cap Exploit
This incident underscores how supply cap logic can be gamed when direct token transfers bypass deposit checks, a flaw that may not be unique to Moonwell. The inflated share value points to a systemic risk in lending protocols that rely on cap enforcement rather than intrinsic balance validation. For DeFi users and auditors, the key watch item is whether other Base-based or cap-dependent markets show similar loopholes, and how protocols adjust their accounting to treat direct transfers as equivalent to deposits. The broader takeaway is that cap mechanisms alone are insufficient without robust internal balance tracking.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.