Malda (prev. Mendi Finance) Hack

May 30, 2025 – Malda (formerly Mendi Finance) suffered a ~$273K exploit on the Linea network due to a compromised contract. All contracts were paused, and the team is investigating.

A malicious actor gained control over a vulnerable Malda smart contract on the Linea network, stealing ~$273K in assets including USDC, WETH, weETH, wrsETH, ezETH, and WBTC. The attacker swapped the funds to ETH, bridged them to Ethereum via Stargate Finance, and laundered them through Tornado Cash. Mendi contracts were unaffected, and Malda remains paused during the investigation.

A 10% white-hat bounty was offered for voluntary fund return.