{
  "version": 1,
  "event_id": "evt_b970d58089c37786",
  "url": "https://xiyu.news/events/evt_b970d58089c37786/",
  "json": "https://xiyu.news/api/events/evt_b970d58089c37786.json",
  "type": "security_incident",
  "status": "monitoring",
  "category": "crypto",
  "title": {
    "zh": "Moonwell MAMO 价格操纵攻击",
    "en": "Moonwell MAMO price-manipulation exploit"
  },
  "current_state": {
    "zh": "损失和攻击方式得到重复来源确认。",
    "en": "The loss and attack mechanism were corroborated by duplicate coverage."
  },
  "first_seen_at": "2026-08-28T08:00:00+08:00",
  "last_updated_at": "2026-08-28T08:00:00+08:00",
  "last_material_change_at": "2026-08-28T08:00:00+08:00",
  "confidence": 1.0,
  "updates_count": 1,
  "sources_count": 2,
  "entities": [
    "attack",
    "base",
    "loses",
    "mamo",
    "manipulation",
    "moonwell",
    "price"
  ],
  "identifiers": [],
  "topics": [
    "base",
    "lending-protocol",
    "moonwell"
  ],
  "updates": [
    {
      "update_id": "upd_e51e0c944b5ca521",
      "event_id": "evt_b970d58089c37786",
      "occurred_at": "2026-08-28T08:00:00+08:00",
      "published_at": "2026-08-28T08:00:00+08:00",
      "first_seen_at": "2026-08-28T08:00:00+08:00",
      "time_precision": "edition",
      "update_type": "initial",
      "material_change": true,
      "title_zh": "Moonwell 在 Base 上因 MAMO 价格操纵损失约 870 万美元。",
      "title_en": "Moonwell lost about $8.7M in a MAMO price-manipulation attack on Base.",
      "what_changed_zh": "Moonwell 在 Base 上因 MAMO 价格操纵损失约 870 万美元。",
      "what_changed_en": "Moonwell lost about $8.7M in a MAMO price-manipulation attack on Base.",
      "current_state_zh": "损失和攻击方式得到重复来源确认。",
      "current_state_en": "The loss and attack mechanism were corroborated by duplicate coverage.",
      "detailed_summary_zh": "在 Base 网络上，攻击者抬高流动性较差的 MAMO 代币价格并以此借入资产，导致 Moonwell 损失约 870 万美元。该协议随后将所有 Base 核心市场的借款上限以及 MAMO 和 WELL 的供应上限降至 1 wei。\n\n这次攻击凸显了 DeFi 借贷协议在面对预言机操纵时的脆弱性，尤其是当使用流动性较差的代币作为抵押品时。这是 Moonwell 在不到一年内第四次发生与定价相关的事故，使人们对该协议的风险控制以及更广泛的借贷市场信心产生质疑。\n\n攻击者花费约 700 万美元拉高 MAMO 的价格，随后借入 cbBTC、USDC、WETH 和 wstETH，并将所得资金兑换为 870 万枚 DAI，存于一个由 Tornado Cash 资助的地址中。安全公司 CertiK 和 PeckShield 估计总损失约为 870 万美元。",
      "detailed_summary_en": "Moonwell suffered an estimated $8.7 million loss after an attacker inflated the price of the illiquid MAMO token and borrowed against it on the Base network. The protocol responded by cutting borrow caps on all Base core markets, as well as MAMO and WELL supply caps, to 1 wei.\n\nThis attack underscores how vulnerable DeFi lending protocols remain to oracle manipulation, particularly when thinly traded tokens are used as collateral. It marks Moonwell's fourth pricing-related incident in less than a year, raising questions about the protocol's risk controls and wider confidence in lending markets.\n\nThe attacker spent roughly $7 million to pump MAMO's price, then borrowed cbBTC, USDC, WETH, and wstETH before swapping the proceeds into 8.7 million DAI held in a Tornado Cash-funded address. Security firms CertiK and PeckShield estimated the total loss at approximately $8.7 million.",
      "background_zh": "",
      "background_en": "",
      "community_discussion_zh": "",
      "community_discussion_en": "",
      "market_impact_zh": "",
      "market_impact_en": "",
      "importance_score": 8.0,
      "references": [],
      "confidence": 1.0,
      "story_ids": [
        "rss:thedefiant.io_api_feed:0624aecbfc58fb6d",
        "google_news:article:1e714397b5d1d6c7"
      ],
      "sources": [
        {
          "url": "https://thedefiant.io/news/hacks/moonwell-loses-8-7-million-to-mamo-price-manipulation-on-base",
          "label": "The Defiant",
          "source_type": "rss",
          "official": false
        },
        {
          "url": "https://news.google.com/rss/articles/CBMinAFBVV95cUxOTVFhaVhJN1ZjdFFKWEg1R3MxbXhqUUhMUU5FWGs0VENrZkxNelVOX1RWZWhqOEtFcWNxODA1ZFlSUUpYazAza0lVSUZ1YnFSdjlLMkc3bGZCU2FBU0dZYmNpdFF3ZlppUzRSU3JGZTJNalR5ckZxdlJoallTNUFfeWI4Y2RDby1EYzZZMExZZzdBV2xFWWNsTDJLeVE?oc=5",
          "label": "Startup Fortune",
          "source_type": "google_news",
          "official": false
        }
      ]
    }
  ]
}