MALT Loses $72K After Flawed Swap Lets Attacker Tap Treasury DAI

A DeFi attacker drained about $72,000 from MALT after exploiting a flaw in the protocol’s swap function, security firm SlowMist reported.

The attacker used a small amount of input to trigger the faulty swap. They then received more MALT than the transaction should have allowed. SlowMist said the exploit involved DAI supplied by MALT’s treasury, allowing the attacker to extract funds from the protocol.

SlowMist TI Alert

MALT Loss: ~$72k

Root Cause: swap(uint256,uint256,address) records the caller’s input and pre-swap reserves, then invokes an external rebalanceHook before transferring the requested output. The hook withdraws DAI from the Capital Source and deposits…

— SlowMist (@SlowMist_Team) October 3, 2026

Swap Flaw Lets Attacker Tap Treasury Funds

SlowMist said the flaw affected MALT’s swap(uint256,uint256,address) function. The function recorded the tr…

Read The Full Article MALT Loses $72K After Flawed Swap Lets Attacker Tap Treasury DAI On Coin Edition.