GoPlus Security 🚦 (@GoPlusSecurity): 🚨 GoPlus Security Alert: The lending and stablecoin platform Abracadabra ( $SPELL ) appears to have been attacked again, with losses of approximately…
Estimated coin impact
Scores are not price-change percentages. High impact means a score of +70 or more, or -70 or less.
🚨 GoPlus Security Alert: The lending and stablecoin platform Abracadabra ( $SPELL ) appears to have been attacked again, with losses of approximately $1.77 million. Its official Twitter account @MIM_Spell has not been updated since September 9. Attacker Address: 0x1AaaDe3e9062d124B7DeB0eD6DDC7055EFA7354d Attack Contract: 0xB8e0A4758Df2954063Ca4ba3d094f2d6EdA9B993 (Self-destructed after the attack) Attacked Contract: 0xd96f48665a1410c0cd669a88898eca36b9fc2cce (https://t.co/65LzGfczQp: Degenbox) Attack Transaction: https://t.co/bLrCGKmUKm After completing the attack transaction, 51 ETH was transferred to TornadoCash. The attacker's address (0x1AaaDe) still holds 344 ETH (~$1.55 million) that has not been moved. ⚠️ The team later responded in the Discord community, stating that DAO reserve funds will be used to repurchase the affected $MIM. However, the official Twitter account @MIM_Spell has not been updated since September 9. 📅 Abracadabra Money has been attacked twice before due to contract vulnerabilities: 1️⃣ On January 30, 2024, a flash loan attack exploiting a rounding calculation vulnerability in the contract resulted in a loss of approximately $6.5 million, causing the MIM stablecoin to depeg. 2️⃣ On March 25, 2025, a hack exploiting a business logic vulnerability during collateral liquidation led to a loss of approximately $13 million.