REKT AUTOPSY
ALL CASES|Scan Wallet →
CASE FILE #11
ExploitBSC

Mobius Token

May 11, 2025

CAUSE OF DEATH

Decimal precision miscalculation allowed attackers to mint unlimited tokens.

TOTAL LOST
$2.2M
CHAIN
BSC
TYPE
Exploit
📄

FORENSIC REPORT

TIME OF DEATH

TIME OF DEATH: May 11, 2025, BSC network. The specimen arrived at our facility as a thoroughly compromised ERC-20 contract. Preliminary examination reveals the victim was subjected to systematic token inflation via decimal miscalculation—a pathology we've observed with increasing frequency in the 2025 season.

CAUSE OF DEATH ANALYSIS

CAUSE OF DEATH ANALYSIS: The contract exhibits a critical flaw in its decimal handling mechanism. The perpetrators identified and exploited an inconsistency between the token's stated decimal places and the actual mathematical implementation governing token supply. This allowed minting operations that should have been impossible under normal circumstances. The victim's safeguards were essentially non-existent; there was no circuit breaker, no rate limiting, no pause functionality. The attacker simply walked through an open door and printed tokens until the house was empty. We're observing approximately $2.2 million in direct asset hemorrhage from liquidity pools.

CONTRIBUTING FACTORS

CONTRIBUTING FACTORS: The victim showed classic signs of inadequate pre-deployment security practices. No audit trail, no formal verification process detected in the evidence. The decimal miscalculation represents a fundamental oversight—the kind of error that should have been caught during basic unit testing. Red flags were undoubtedly present weeks prior: unusual transaction patterns, suspicious mint events, but nobody was monitoring the vital signs. This is the cryptocurrency equivalent of leaving the ICU unattended.

VICTIM IMPACT

VICTIM IMPACT: Liquidity providers sustained the primary trauma, with their pool assets systematically drained as artificially minted tokens flooded the market. Secondary casualties include retail holders who watched their token value collapse from dilution. The total mortality assessment: $2.2 million in confirmed losses, though we suspect the true cost includes destroyed trust and opportunity cost.

PATHOLOGIST'S NOTE

PATHOLOGIST'S NOTE: In twenty years of examining dead tokens, I've learned that the most lethal exploits are rarely the complex ones. A decimal point in the wrong place. A missing zero. A developer who confused 10^18 with 10^8. We find the bodies, we document the cause of death, and we move on to the next one. See you at the next autopsy.

"Mobius Token expired from a simple math error: wrong decimal places in the contract. Attackers exploited this arithmetic gap to print money like it was Monopoly. $2.2M vaporized on BSC."

Share on 𝕏
Were you holding this? Get your wallet autopsy →

Data from DefiLlama