🚨 GoPlus Security Alert: The lending and stablecoin platform Abracadabra ( $SPELL ) appears to have been attacked again, with losses of approximately $1.77 million.
Its official Twitter account @MIM_Spell has not been updated since September 9.
Attacker Address: 0x1AaaDe3e9062d124B7DeB0eD6DDC7055EFA7354d
Attack Contract: 0xB8e0A4758Df2954063Ca4ba3d094f2d6EdA9B993 (Self-destructed after the attack)
Attacked Contract: 0xd96f48665a1410c0cd669a88898eca36b9fc2cce (https://t.co/65LzGfczQp: Degenbox)
Attack Transaction: https://t.co/bLrCGKmUKm
After completing the attack transaction, 51 ETH was transferred to TornadoCash. The attacker's address (0x1AaaDe) still holds 344 ETH (~$1.55 million) that has not been moved.
⚠️ The team later responded in the Discord community, stating that DAO reserve funds will be used to repurchase the affected $MIM. However, the official Twitter account @MIM_Spell has not been updated since September 9.
📅 Abracadabra Money has been attacked twice before due to contract vulnerabilities:
1️⃣ On January 30, 2024, a flash loan attack exploiting a rounding calculation vulnerability in the contract resulted in a loss of approximately $6.5 million, causing the MIM stablecoin to depeg.
2️⃣ On March 25, 2025, a hack exploiting a business logic vulnerability during collateral liquidation led to a loss of approximately $13 million.