Mobius Token Smart Contract Exploited for $2.15 Million on BNB Chain
A hacker drained $2.15 million from Mobius Token (MBU) by exploiting a flaw in its minting mechanism on the BNB Chain. Web3 security firm Cyvers confirmed the attack on May 11, tracing the stolen funds to Tornado Cash.
The attacker deployed a rogue contract at 07:31 UTC, minting 9.73 quadrillion MBU tokens with just 0.001 BNB. These were swiftly swapped for stablecoins before being anonymized through the privacy protocol.