DeFi Disaster and Hacking Havoc: Mobius and Ledger Fall Victim to Scammers

by

The whole thing stinks like bad whiskey on a warm day. On May 11, Mobius, that fancy DeFi platform everyone was raving about, got played like a fiddle. Someone managed to hack into their smart contract on the BNB Chain, draining a neat $2.15 million in Mobius Tokens (MBU). Oh, and guess who caught wind of this? Cyvers, the blockchain security firm. Talk about an inconvenient party-crasher.

“Two minutes before the exploit, we saw something suspicious—a nasty smart contract deploying itself, ready to ruin someone’s day. It then went after the Mobius Tokens,” Cyvers explained, sounding almost too calm for a situation like this.

So, what happened next? The attacker did a little digital damage, bouncing around malicious transactions like a pinball, targeting the victim’s wallet. But surprise, surprise—no mention of it on MobiusDAO’s X feed. Classic move, right?

ALERT: Mobius Token’s smart contract just got drained for over $2.15M in MBU on the BNB Chain. Our system saw it coming, but that didn’t stop the thief.

— Cyvers Alerts (@CyversAlerts) May 11, 2025

MBU Crashes to Zero (Because Why Not?)

Like a kid throwing a tantrum in a candy store, the hacker didn’t just walk away with the loot. Oh no. They used Tornado Cash to mix things up and hide their dirty deeds. And then, the magic happened: CertiK said the thief minted a whopping 9.7 quadrillion BEP-20 MBU tokens. They swapped them out for stablecoins. But here’s the kicker: they only needed 0.001 wrapped BNB (worth about 65 cents) to pull it off. Talk about a low-budget heist.

Meanwhile, Mobius’ MBU token did what any crypto asset does when things go south—it tanked to zero. DEXscreener probably had a field day with that one.

But wait! Ethereum decided to throw a wrench into things too, introducing the Pectra network upgrade, which allows hackers to use just an off-chain signature to drain wallets. Because why settle for stealing one thing when you can steal it all?

Ledger, Still the Gift That Keeps on Giving

Now, if you thought Mobius was the only one getting hacked, think again. Ledger, that trusted hardware wallet maker, managed to get itself hacked yet again. Over the weekend, an attacker managed to compromise a moderator’s account on Ledger’s Discord. From there, they posted some sketchy links, convincing folks to “verify recovery phrases.” Because, of course, that’s exactly what you do when your wallet’s at risk—click on random links from shady characters.

But don’t worry, Ledger swooped in, wrestled control back, and removed the links. Talk about a close call.

Just got this security warning. Ledger’s Discord admin was hacked. They tried to phish recovery phrases. You know the drill: never hand over your private keys to anyone, not even if they’re offering you free pizza.

— CZ BNB (@cz_binance) May 12, 2025

To make things even more entertaining, Ledger’s been involved in scams for five years. In April, scammers sent out physical letters to Ledger users, asking for seed phrases. All of this ties back to their 2020 data breach, which exposed personal info and addresses of over 270,000 customers. A real charm offensive, right?

Read More

2025-05-12 23:35