Morning Edition · Thursday, October 1, 2026Published at 1:49 AM EDT · New York

Two Accounting Bugs Drain Small DeFi Pools as France's Cyber Agency Reports Its Own Breach

A double-counted first-deposit bonus drained about 36,900 dollars on Ethereum and a reserve-accrual mismatch drained about 92,600 dollars on BNB Chain, both from logic errors rather than from stolen keys.

Security researchers published reproductions of two small exploits overnight. In the first, a token contract identified as MUS on Ethereum paid a first-deposit bonus that its accounting counted twice, letting an attacker extract roughly 36,…