Mobius incident: issue 9 quadrillion tokens and lose $2 million
The project was hacked just three days after launch because it contained a technical vulnerability
14.05.2025
698
2 min
0
Another hopeful crypto project failed to survive even a week after its launch. GetBlock AML Research explains how a hacker withdrew $2 million from the $MBU token and why it was easy money for him.
Mathematical error
The unusual activity of the Mobius smart contract on the BNB Smart Chain was noticed on May 11. Three days after the token was launched and received liquidity from this address: 0x18027eF7CC0e7dCe85120f69D0B91B4F4F4c9E07Bf.
$MBU price collapse after the attack
Malicious transaction: 0x2a65254b41b42f39331a0bcc9f893518d6b106e80d9a476b8ca3816325f4a150.
Using the .deposit function in the Mobius smart contract, the hacker issued 9 731 099 570 720 980 659843835099042677 $MBU tokens, paying only 0,001 BNB. It turned out that the developers had made a multiplier error in the .deposit function, which made it possible to issue over 9 quadrillion unsecured tokens.
.deposit function with multiplier error
After minting the tokens, the attacker exchanged them for $2,16 million USDT and transferred the funds to the address: 0xb32a53af96f7735d47f4b76c525bd5eb02b42600. On the day of the attack, the hacker used this address to hack another platform, MHT Trade. The hacker sent the USDT received during the attack to Tornado Cash.
Visualization of the transfer of stolen funds to Tornado Cash
Mobius is one of those projects that have not been technically audited, so their source code usually contains gross errors that allow disruption of the smart contract and withdrawal of funds from it.
Useful material?
Research
One and the same cryptocurrency address received two completely opposite assessments from different analytics systems: from an ordinary gambling service to an extremely severe criminal offense. This story has become the starting point for a broader conversation about what the scientific standards of blockchain analysis should look like — and why errors in systems like these can shape the fates of real people.
Jul 1, 2026
Research
The blockchain has helped uncover the ties between cryptocurrency fundraising campaigns, exchangers in Syria, and intermediaries in several countries around the world. A telltale pattern has emerged in which the same addresses were used across multiple donation drives at once
Jun 24, 2026
Research
Four Iranian cryptocurrency exchanges accounted for roughly 78% of all digital asset volume tied to the country in 2025. They have now become the focal point of the largest U.S. sanctions campaign against Iran's cryptocurrency infrastructure.
Jun 5, 2026
Research
A financial system is already up and running on public blockchains, with loans, analogues of U.S. Treasuries, and automated capital markets. More than $551 billion has flowed through DeFi protocols — but most of that activity has nothing to do with the real economy and everything to do with the speculative build-up of risk.
May 29, 2026
Research
Around 97% of Chinese suppliers of chemicals used to make fentanyl accept payment in cryptocurrency. The volume of such transactions continues to grow alongside the global market for synthetic drugs
May 22, 2026
Research
For the first time, the new law makes blockchain analytics an officially mandatory tool of financial oversight in the United States. Authorities will also gain the power to restrict transactions with foreign crypto services tied to money-laundering risks.
May 20, 2026
Telegram
Twitter