Tools Crypto Exploit Tracker exploit-0072
Exploit record
Makina Finance
- Loss
- $5M
- Attack vector
- Flash Loan
- Chain
- Ethereum
- Sector
- Yield Aggregator
What happened
On January 20, 2026, Makina Finance suffered a $5M oracle-manipulation exploit against the DUSD/USDC Curve pool, with part of the value intercepted by an MEV builder.
The attacker pulled a giant USDC flash loan, distorted the MachineShareOracle's pricing, and used the bad number to drain the relevant stablecoin liquidity. The funny detail, if one can call it funny, is that a big chunk of the exploit value was frontrun and effectively stolen from the thief by an MEV builder. DeFi increasingly has these nested theft structures now: protocol gets robbed, then the robber gets partially robbed on the way out.
On-chain references
- Attack Transactionetherscan.io/tx/0x569733b8016ef9418f0b6bde8c14224d9e759e7930…
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026