{"id":19018,"date":"2025-03-25T16:17:22","date_gmt":"2025-03-25T16:17:22","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=19018"},"modified":"2025-03-25T16:17:22","modified_gmt":"2025-03-25T16:17:22","slug":"abracadabra-drained-of-13m-in-exploit-targeting-cauldrons-tied-to-gmx-liquidity-tokens","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=19018","title":{"rendered":"Abracadabra Drained of $13M in Exploit Targeting Cauldrons Tied to GMX Liquidity Tokens"},"content":{"rendered":"<div>\n<p>Decentralized lending platform Abracadabra.Finance suffered an attack that drained $13 million worth of cryptocurrency from pools tied to GMX liquidity tokens.<\/p>\n<p>Blockchain security firm PeckShield flagged that contracts involving decentralized exchange GMX and Abracadabra were compromised, leading to the theft of 6,260 ETH, worth around $12.98 million at the time of writing.<\/p>\n<p>The exploit focused on so-called &#8220;<a href=\"https:\/\/docs.abracadabra.money\/learn\/intro\/cauldrons\" target=\"_blank\">cauldrons<\/a>,&#8221; isolated lending markets in Abracadabra where users can borrow against crypto collateral. These particular cauldrons relied on GM tokens, which represent liquidity positions in GMX, a decentralized exchange platform.<\/p>\n<p>GMX <a href=\"https:\/\/x.com\/GMX_IO\/status\/1904509326129238479\" target=\"_blank\">distanced itself<\/a> from the incident. In a post on X, an account associated with the exchange said that GMX\u2019s contracts themselves were unaffected. The team later said the breach was \u201csolely related to the Abracadabra\/Spell cauldrons,\u201d which used GM tokens as collateral but did not involve GMX\u2019s core infrastructure.<\/p>\n<p>In a statement on X, Abracadabra confirmed the exploit and said core contributors and engineers were <a href=\"https:\/\/x.com\/MIM_Spell\/status\/1904535586532180434\" target=\"_blank\">investigating the incident<\/a> to its \u201cfully audited\u201d cauldron. The protocol noted that gmCauldrons had been audited by Guardian Audits \u2014 the same firm that audited GMX contracts \u2014 and were part of a broader security infrastructure involving monitoring and response tools.<\/p>\n<p>The protocol offered the attacker a 20% bug bounty and invited them to negotiate via email or an on-chain message.<\/p>\n<p>Abracadabra is working with Guardian and GMX as well as other security partners in assessing the extent of the damage and how the attack was executed. A full post-mortem will follow once the investigation concludes, and no user collateral was affected, it said.<\/p>\n<p>Last year Abracadabra.Finance suffered a $6.49 million exploit that caused its Magic Internet Money (<a href=\"https:\/\/www.coindesk.com\/price\/mim\" target=\"_blank\">MIM<\/a>) stablecoin to lose its peg to the U.S. dollar.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Decentralized lending platform Abracadabra.Finance suffered an attack that drained $13 million worth of cryptocurrency from pools tied to GMX liquidity tokens. Blockchain security firm PeckShield flagged that contracts involving decentralized exchange GMX and Abracadabra were compromised, leading to the theft of 6,260 ETH, worth around $12.98 million at the time of writing. The exploit focused [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-19018","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/19018","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=19018"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/19018\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=19018"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=19018"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=19018"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}