Decentralized finance (DeFi) platform Makina suffered a $5 million hack in a single day.
The platform, which claims to be “the most advanced DeFi Execution Engine,” was hit by a flash mortgage assault. The exploit affected the mission’s DUSD liquidity pool on the favored trade Curve Finance.
Gmak, early this morning we acquired studies concerning an incident with the $DUSD Curve pool
At this stage, the problem seems to be remoted to DUSD LP positions on Curve. There’s at the moment no indication that different belongings or deployments are affected.
Underlying belongings held in…
— Makina (@makinafi) January 20, 2026
A press release from the Makina group reassured customers that the problem “appears to be isolated to DUSD LP positions on Curve.” Customers with funds in that pool are suggested to withdraw.
In what could show to have been a stroke of luck, the unique hack seems to have been front-run by an MEV bot, in keeping with crypto safety agency Peckshield.
The assault got here at 3:40 AM UTC, netting 1,299 ether ($4 million) for the tackle labelled MEV Builder. The vast majority of the funds ($3.3 million) had been later despatched on to a holding tackle, the place they continue to be.
Makina has reached out to the proprietor of the tackle by way of an on-chain message, requesting return of the funds — much less a ten% bounty.
In response to evaluation from blockchain auditor BlockSec, the entire loss to Makina was 5.1 million USDC. They recognized the basis trigger as counting on “the pool’s spot price when calculating the LP asset value.”
The attacker utilized a flash mortgage to repeatedly make massive swaps within the pool and manipulate the LP share worth.
Gmak!
It appears to have been a busy night time for DeFi hackers; one other, smaller incident preceded the Makina hack by round 4 hours.
This time the goal was SynapLogic, an “AI x Web3 Game Layer” on the Base community.
BlockSec once more explains {that a} defective validation system led to the lack of $186,000. Nevertheless, the hacker’s revenue seems to be restricted to $88,000, as the minted SYP tokens can’t be bought, claimed impartial safety researcher Weilin Lu.
