$2.7m hacked -> funds gone to tornado cash https://t.co/ajRYtadDT0
$2.7m hacked -> funds gone to tornado cash https://t.co/ajRYtadDT0
🚨 @SolvProtocol has been exploited for $2.7M
The BitcoinReserveOffering (BRO-SOLV-20MAY2026) contract's mint() function has a double-minting flaw. When a user mints by transferring a full ERC-3525 NFT, doSafeTransferIn triggers the onERC721Received callback which mints BRO tokens to the caller, and then mint() itself mints again for the same amount. The attacker looped burn→mint 22 times, turning 135 BRO into 567M BRO, then exchanged the inflated BRO for 38 SolvBTC (~$2.73M) via Solv's exchange contract.
TX: https://t.co/yse9IQlcc6
Victim: https://t.co/iV6tjrsfS8 (BRO-SOLV-20MAY2026)
🚨 $2.7M outflow from Solv Protocol | mint bug inflates BRO by 500 million times
- Approximately $2.7M hack occurred on the DeFi protocol “Solv Protocol”
- Cause is a double-mint bug in the mint() function of the BitcoinReserveOffering (BRO) contract
■ Attack flow
・Repeatedly operated on 135 BRO
・Inflated to 567 million BRO
■ Result
・Sold the inflated BRO
·Obtained 38 SolvBTC (≈ $2.73M)
🚨 @SolvProtocol has been exploited for $2.7M
The BitcoinReserveOffering (BRO-SOLV-20MAY2026) contract's mint() function has a double-minting flaw. When a user mints by transferring a full ERC-3525 NFT, doSafeTransferIn triggers the onERC721Received callback which mints BRO tokens to the caller, and then mint() itself mints again for the same amount. The attacker looped burn→mint 22 times, turning 135 BRO into 567M BRO, then exchanged the inflated BRO for 38 SolvBTC (~$2.73M) via Solv's exchange contract.
TX: https://t.co/yse9IQlcc6
Victim: https://t.co/iV6tjrsfS8 (BRO-SOLV-20MAY2026)
• $BRO : Neurodex releases major upgrade with whale wallet tracking, holder breakdowns, and real-time accumulation data.
• $ANYONE : Dashboard improvements go live, enhancing staking order logic and per-stake reward visibility.
• $HTS : Prop3 advances tokenization with metadata finalization and initial property token minting for internal testing.
• $ZIL : Plunder Academy highlighted as gZIL grantee supporting Zilliqa EVM builder education.
• $ZANO : New confidential assets whitelisted, adding wrapped BCH, Solana, and Ton support in the Zano wallet.