---
id: 5244
title: "Mobius Token Exploit Postmortem: How a Proxy Logic Bug Enabled a $2.15M Drain"
source_domain: hackenproof.com
source_url: "https://hackenproof.com/blog/mobius-token-exploit-proxy-misconfiguration-bsc"
published_at: "2026-06-11 08:15"
tags: ["web3", "vulnerability-research", "incident-response", "smart-contracts", "defi", "exploit-analysis", "postmortem", "bsc", "proxy-contract"]
phying_url: "https://phying.com/item/5244"
lang: en
---

# Mobius Token Exploit Postmortem: How a Proxy Logic Bug Enabled a $2.15M Drain

## Summary

A BSC postmortem: how a proxy contract's price-normalisation and decimals accounting mistake let an attacker mint tokens and drain $2.15M of Mobius liquidity, reconstructed step by step.

## Intelligence Metadata

- **Sources:** hackenproof.com
- **Published:** 2026-06-11 08:15
- **Original:** https://hackenproof.com/blog/mobius-token-exploit-proxy-misconfiguration-bsc
- **Phying News:** https://phying.com/item/5244