# Two Accounting Bugs Drain Small DeFi Pools as France's Cyber Agency Reports Its Own Breach

A double-counted first-deposit bonus drained about 36,900 dollars on Ethereum and a reserve-accrual mismatch drained about 92,600 dollars on BNB Chain, both from logic errors rather than from stolen keys.

- Published: 2026-10-01T05:49:51.228Z
- Canonical: https://polylog.news/crypto/2026-10-01/two-accounting-bugs-drain-small-defi-pools-as-france-s-cyber
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [DeFiHackLabs](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/8c2b0c739271877f78327cc50becbe6a912d5320), [DeFiHackLabs](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/c11705e9d7c8ee98d5d0c2914465f6a890b9e3c4), [Polylog editors](https://polylog.news)

Security researchers published reproductions of two small exploits overnight. In the first, a token contract identified as MUS on Ethereum paid a first-deposit bonus that its accounting counted twice, letting an attacker extract roughly 36,…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-10-01/two-accounting-bugs-drain-small-defi-pools-as-france-s-cyber (subscription information: https://polylog.news/pricing).