67 cents minted 9.73 quadrillion MBU via a double-decimal bug, letting an attacker siphon $2.15 M, dump tokens, and vanish through Tornado Cash. @MobiusDAO123 went from launch to zero in three days - undone by math nobody may have bothered to test. https://t.co/yJhdH6ljzP https://t.co/flbcKGHZIu
#CertiKInsight 🚨 On 12 April 2025, an unverified contract was exploited, leading to the loss of ~$28k due to a lack of access control. Here we break down how to determine the root cause on an unverified contract 👇 https://t.co/yVBa97zpjh
Cointelegraph: "Mobius Token smart contracts on BNB Chain exploited, $2.1M drained" https://t.co/FDHvAGRHte
The Mobius Token (MBU) project suffered a hack on May 11, 2025, resulting in a loss of approximately $2.15 million. The exploit involved a minting vulnerability caused by a double-decimal bug in the smart contract on the BNB Chain, which allowed an attacker to mint 9.73 quadrillion MBU tokens from an initial 67 cents. The attacker then dumped the tokens and laundered the proceeds through Tornado Cash. This incident led to the rapid collapse of Mobius DAO, which went from launch to zero within three days. Additionally, on April 12, 2025, an unverified contract was exploited due to a lack of access control, causing a smaller loss of about $28,000. Security firm CertiK has provided detailed analyses of both vulnerabilities.