In March 2026, Solv Protocol lost about $2.7 million through a double-mint exploit in which the attacker found a way to mint duplicate tokens within a single transaction context, per Q1 2026 incident tracking aggregated by Sherlock from PeckShield and other firms. The flaw lay in the minting function’s state management rather than an access-control failure, letting the attacker extract more tokens than the deposited collateral justified. The incident, one of March’s twenty tracked exploits totalling about $52 million, reinforced the importance of strict state updates and reentrancy-style guards around mint paths, and of fuzzing minting logic against edge cases that involve repeated or nested operations.
Have a hack to report? Contact us. or Share this report