MALT swap flaw causes a reported $72,000 loss

What happened

SlowMist reports a loss of about $72,000 from MALT on 3 October. The attacker made the protocol move its own DAI into a swap pool, then used that added money to receive far more MALT than their payment should have bought.

The swap measured balances before an external rebalancing call. Its final check counted the protocol-funded DAI as money supplied for the swap. The linked transaction is dated 06:29 UTC on 3 October; SlowMist published its analysis later that day. The dollar amount is the researcher’s estimate.