MONA LisaVault exploit analysis
MONA LisaVault's `redeem` debited `msg.sender`'s share regardless of the supplied `recipient`. The attacker called `redeem(victim)` and walked the victim's shares out.
- Occurred
- Logged
- Source
- DeFiHackLabs
Logged as “2026-04-14: Reward Farming Burnaddress Accounting Exploit on MONA LisaVault”.
Analysis1 min read
MONA LisaVault's redeem accepted a recipient argument and credited the recipient with the redeemed LP tokens, but the share debit was against msg.sender's balance rather than the recipient's. The attacker called redeem(victim) and walked victim's shares out.
DeFiHackLabs reconstructs the sequence against the live state; total loss is captured in the PoC.
What would have prevented it: a redeem whose share debit is keyed to the recipient, with any caller-supplied recipient rejected unless they have the legitimate share.
Other exploits
- ThetanutsVaultShareRounding exploit analysis 20 Apr 2026
- AaveRebalancerCreditDelegation exploit analysis 19 Apr 2026
- XLootStaking exploit analysis 15 Apr 2026
- Saturn Protocol exploit analysis 14 Apr 2026
- SubQuerySettings exploit analysis 12 Apr 2026
- SquidMulticallAllowanceDrain exploit analysis 7 Apr 2026
Query every incident yourself — free, no signup
Updated 14 Oct 2026. Figures are as reported by the sources listed above and are not independently verified.
The crypto data layer for humans, apps, and AI agents.
