"MBU Token Hack: $2.1M Drained - BNB Chain Exploit"

Exploitation of Mobius Token smart contracts on BNB Chain results in $2.1M loss

On May 11, hackers managed to drain over $2.15 million from the Mobius Token ($MBU) smart contracts on the BNB Chain in a calculated exploit, as reported by security firm Cyvers Alerts.

The attack took place when the perpetrator deployed the contract from address 0xb32a53... at 07:31:38 UTC and initiated the exploit at 07:33:56 UTC, resulting in the siphoning of funds from the victim wallet 0xb5252f...

Cyvers confirmed that the attacker utilized contract 0x631adf... to carry out a series of malicious transactions. This smart contract managed to drain 28.5 million MBU tokens and convert them into stablecoins, leading to a net loss of $2,152,219.99 for the victim.

In total, the attacker stole 28.5 million MBU tokens and converted them to $2.15 million worth of USDT.

Cyvers categorized the exploit as "critical," citing the attacker's usage of suspicious contract code and abnormal transaction patterns.

As of the latest update, the attacker's wallet remains active and continues to hold onto the stolen funds. The team behind Mobius Token has yet to issue an official statement regarding the incident.

"Two minutes before the exploitation occurred, our system detected the deployment of a malicious smart contract that ultimately targeted the Mobius Token smart contracts," Cyvers disclosed on X.

Related: Bybit hacker launders 100% of stolen $1.4B crypto in 10 days

April sees crypto losses nearing $360 million

In April 2025, blockchain security firm PeckShield released a report indicating that the industry experienced nearly $360 million in digital asset theft across 18 hacking incidents.

Comparatively, April's losses represented a 990% surge from the previous month, when crypto hacks amounted to approximately $33 million. The most substantial portion of the losses stemmed from an unauthorized Bitcoin transfer.

Notably, on April 28, blockchain investigator ZachXBT raised concerns over a suspicious transfer of $330 million in BTC. Subsequent investigations revealed that this transfer was a result of a social engineering attack aimed at an elderly individual in the United States.

Magazine: 12 minutes of nail-biting tension when Ethereum's Pectra fork goes live