Meta Pool hit with $27M exploit, but attacker flees with only $132K

Key Points

  • Meta Pool Exploit: A hacker exploited Meta Pool's "fast unstake" functionality, minting 9,705 mpETH tokens worth nearly $27 million, but only managed to steal 52.5 ETH, valued at over $132,000, due to low liquidity in affected pools.**
  • Early Detection: Meta Pool's early detection systems identified the exploit, enabling the team to pause the affected smart contract and prevent further unauthorized activity or losses.**
  • Affected Pools: The attack impacted Ethereum mainnet and Optimism pools, though low liquidity and volume in some pools limited the hacker's profits.**
  • Response and Recovery: Meta Pool has paused the mpETH contract, promised to reimburse lost assets, and plans to release a full post-mortem and recovery plan within two days.**

Summary

Meta Pool, a liquid staking protocol, suffered a security breach where a hacker exploited the "fast unstake" functionality to mint 9,705 mpETH tokens valued at nearly $27 million. However, due to low liquidity in the affected swap pools on Ethereum mainnet and Optimism, the attacker only managed to steal 52.5 ETH, worth just over $132,000. Meta Pool's early detection systems played a crucial role in identifying the exploit, allowing the team to pause the impacted smart contract and prevent further losses. The attack involved unauthorized token minting via the ERC4626 mint() function, as confirmed by co-founder Claudio Cossio and blockchain security firm PeckShield, which noted a critical bug in the staking contract. Despite the breach, Meta Pool assured users that staked Ethereum remains safe on the SSV Network. The team has committed to reimbursing affected users and ensuring they are made whole, with a detailed post-mortem and recovery plan expected within two days. This incident adds to a series of recent crypto exploits, including attacks on Alex Protocol and BitoPro, highlighting ongoing cybersecurity challenges in the industry.

cointelegraph
June 18, 2025
Crypto
Read article

Related news