Critical Meta Pool Exploit: $27M Staking Vulnerability Uncovered

A logic error in the smart contract for Meta Pool's mpETH token allowed users to mint mpETH without staking the underlying ETH, according to PeckShield, the blockchain security firm that identified the bug and reported it on X. Approximately 9,700 mpETH tokens were reportedly minted through the flaw before it was widely publicized, an amount the article puts at around $27 million based on the token's market value at the time. The article notes that the technical details had not been fully disclosed by the platform as of writing.