MoonHacker
Last changed 2026-11-03 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score was recalculated from the page's findings, 48 → 58. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -3.2 |
| Incidents it suffered (e.g. hacks) | -3.2 |
| Problems around it, caused by others | -0.8 |
| Sum | 58 |
- 3 sections set aside: the claims did not hold up in a fact-check, pending correction.
Score: 58/100 (kept between 0 and 100)
How scoring works →Page reliability: Fact-checked 2026-11-03 · 5 of 10 claims confirmed · 4 need better sources · 1 disputed
anchored·2AM56y…RCS5Summary
MoonHacker is an independently deployed DeFi vault protocol built on Optimism that was designed to interact with the Moonwell lending protocol. On December 23, 2024, MoonHacker vault contracts suffered a flash loan exploit due to improper input validation and absent access controls in the executeOperation function, resulting in the loss of approximately $320,000 USDC. The Moonwell team confirmed no affiliation with MoonHacker, the vault deployers remain anonymous, and stolen funds were converted to DAI and routed through Tornado Cash, complicating recovery efforts.
Connected Entities
5 entities · 60 linked investigations- MoonHacker→mentioned with→ZachXBT(70%)
- ZachXBT→mentioned with→Ethereum(70%)
- Optimism→mentioned with→Ethereum(80%)
- MoonHacker→mentioned with→Optimism(80%)
- MoonHacker→mentioned with→Ethereum(80%)
- MoonHacker→mentioned with→Moonwell Lending(80%)
- Moonwell Lending→mentioned with→Optimism(80%)
- Moonwell Lending→mentioned with→Ethereum(75%)
Timeline(5 events)
23 December 2024
MoonHacker vault contracts exploited on Optimism via flash loan and unchecked executeOperation callback; approximately $320,000 USDC drained.
23 December 2024
Cyvers Alerts issues real-time alert identifying the attack on Moonwell's USDC lending contract on Optimism involving MoonHacker vault contracts.
23 December 2024
Stolen USDC swapped to DAI and retained in attacker wallet; attacker wallet had been pre-funded via Tornado Cash on Ethereum.
24 December 2024
Moonwell DeFi publicly disavows any affiliation with MoonHacker, confirming core Moonwell lending pools are unaffected.
2 January 2025
Dedaub discloses on X that its monitoring tools had flagged the unchecked flashloan callback and unrestricted approve proxy vulnerabilities in MoonHacker with high confidence prior to the exploit.
Decision Log
- slot 465082250 · hash 8dP6GY22DoxyyCYdC3kRuHfwr4sbqCBjPt9MQ82KGKyD
- slot 465082245 · hash 7C6owSaBspHK6isYaZDo6yV7gghF6PZ4x8Z28vKGGdR
- slot 465082240 · hash GGW61RJX4SYq2J3GfhvN2JXZnUk9XT844aorWyg3yCn3
- slot 455357321 · hash 3FJdtDdF7BEZ6DaCXVezwjNiefLqw3ThxZzGstPGX2QW
- slot 423086605 · hash B8VmanFxXULbZb5EUfcTY7G9vfs5wJ8Y2tZdXMdaboPa
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 6 of 7 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:26 AM
last updated: 11/3/2026, 11:22:34 PM
7 viewsavoid.net — verified advice for a post-truth world