Moonwell attacker inflates MAMO price, borrows $10M in assets, nets about $6M

A recent attack on the DeFi lending protocol Moonwell has resulted in the theft of approximately $6 million, according to blockchain analyst CJ_Blockchain. The attacker artificially inflated the price of the MAMO token, used it as collateral to borrow $10 million in other assets, and then exited with a net profit.

How the attack unfolded

According to the analyst’s report on X, the attacker purchased around $7 million worth of MAMO tokens, driving up their price. These tokens were then deposited on Moonwell as collateral. With this collateral, the attacker borrowed a combination of cbBTC, $USDC, WETH, and wstETH, totaling approximately $10 million.

After securing the borrowed assets, the attacker sold the remaining MAMO tokens for about $3.2 million. This resulted in an estimated $3.8 million loss on the MAMO trades themselves, but the value of the borrowed assets far exceeded that loss. The overall extraction is estimated at about $6 million when accounting for the borrowed funds.

Market and security implications

This incident highlights a persistent vulnerability in DeFi lending protocols: the reliance on price oracles and the potential for manipulation of low-liquidity tokens. When a token has a small market cap or limited liquidity, a large buy order can significantly skew its price, allowing an attacker to use the inflated value as collateral for larger loans.

Moonwell has not yet issued an official statement, but the community is closely monitoring the situation. The attack underscores the importance of robust risk management mechanisms, such as dynamic collateral factors and price deviation checks, to prevent such exploits.

Why this matters to DeFi users

For users of DeFi platforms, this event is a reminder of the risks inherent in decentralized finance. While these protocols offer innovative financial services, they also carry unique security risks. Users should be aware of the potential for price manipulation and the importance of using platforms with strong security measures and active monitoring.

Conclusion

The Moonwell attack is a significant event in the DeFi space, demonstrating how price manipulation can lead to substantial financial losses. As the investigation continues, the incident serves as a critical case study for improving security practices across the industry.

FAQs

Q1: What is Moonwell?
Moonwell is a decentralized finance (DeFi) lending protocol built on the Base and Optimism networks, allowing users to lend and borrow cryptocurrencies.

Q2: How did the attacker inflate MAMO’s price?
The attacker purchased a large amount of MAMO tokens, roughly $7 million worth, which significantly increased the token’s price due to its low liquidity. This inflated price was then used as collateral on Moonwell.

Q3: What assets were borrowed in the attack?
The attacker borrowed cbBTC, $USDC, WETH, and wstETH, totaling approximately $10 million, using the inflated MAMO tokens as collateral.