What happened
On March 15, 2024, Mozaic Finance lost assets after a private-key compromise gave an attacker access to its vaults. CertiK estimated $2.1 million stolen, while Halborn estimated $2.4 million. Reports described funds frozen at MEXC, not a verified completed return.
Technical root cause
A compromised privileged key retained unilateral access to a legacy vault security module.
How it happened
- The attacker obtained a core team member's private keys, according to Halborn's account.
- The keys authorized functions in a still-active security module with vault access.
- Stablecoins were transferred out and sent to MEXC and Binance.
Protocol details
Classification
Yield Aggregator / Key Compromise
Protocol Type
Yield
Implementation language
Solidity
Protocol links
Website
@Mozaic_Fi
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
