According to Odaily Planet Daily, GoPlus Security has detected that the lending and stablecoin platform Abracadabra Money (SPELL) has been attacked again, resulting in losses of approximately $1.77 million. Its official X account has not been updated since September 9th.

After completing the attack transaction, the attacker's address (0 x 1 Aaa...354 d) transferred 51 ETH to TornadoCash. Currently, the address still holds 344 ETH (about 1.55 million US dollars) that has not been transferred.

The project team later responded in the Discord community that they would use DAO reserves to repurchase the affected MIM.

Abracadabra Money has previously suffered two attacks due to contract vulnerabilities:

1. On January 30, 2024, due to a contract rounding calculation vulnerability, the MIM stablecoin was attacked by a flash loan, resulting in a loss of approximately US$6.5 million and causing the MIM stablecoin to decouple.

2. On March 25, 2025, due to a business logic vulnerability during collateral liquidation, the platform was attacked, resulting in a loss of approximately US$13 million.