Over the weekend, scammers successfully breached Ledger’s social media accounts, while Mobius, a DeFi and real-world asset tokenization platform, fell victim to a major exploit, resulting in the loss of $2.1 million in Mobius Tokens (MBU).
The incident involving Ledger occurred when attackers compromised a contracted moderator’s account on the hardware wallet maker’s Discord channel, posting malicious links that urged users to verify recovery phrases. However, Ledger regained control and removed the scam links promptly.
Meanwhile, on the BNB Chain, Mobius suffered a smart contract exploit on May 11, with hackers utilizing a malicious contract to steal $2.15 million worth of MBU tokens. The tokens were laundered through the Tornado Cash crypto mixer to obscure the transactions, and the MBU token’s value plummeted to zero. Blockchain security firm Cyvers reported that the attacker minted 9.7 quadrillion BEP-20 MBU tokens, which were swapped for stablecoins, taking full advantage of a vulnerability in the Mobius system.
These attacks highlight the ongoing risks in the crypto space, as both social media and smart contracts remain vulnerable to exploitation.