MM.Finance

Profile narrative

MM.Finance operates as a decentralized finance platform that enables users to exchange cryptocurrencies and provide liquidity through automated smart contracts. The platform’s core service is a web‑based interface that facilitates token swaps and the addition or removal of liquidity in various pools. Headquartered in the United States of America, the service is accessible to users worldwide via the internet.

In May 2022 the platform experienced a DNS‑based attack in which a malicious contract address was injected into its frontend code. The exploit redirected user transactions during swaps or liquidity adjustments, leading to the theft of more than two million dollars worth of cryptocurrency. Following the incident, the platform reported that affected users lost funds when they attempted to withdraw liquidity because the withdrawals were sent to the attacker’s address.

To address the loss, MM.Finance created a compensation pool financed by waiving its own team’s trading fees. It also launched a security review of its DNS configurations and decreased its dependence on certain third‑party service providers to limit similar risks. The organization publicly urged the attacker to return ninety percent of the stolen funds within forty‑eight hours, warning of possible FBI involvement while acknowledging the sophistication of the exploit. These actions highlight the platform’s focus on rapid incident response, user compensation, and strengthening of its infrastructure against DNS‑related threats.

Incidents

1 incident linked to this organisation.