Moonwell MAMO Exploit Leaves $9.13M in Obligations

Moonwell’s MAMO exploit on Base left approximately $9.131 million in borrower obligations after liquidations began, according to the protocol’s August 28 post-mortem. The incident enabled 18 borrows worth about $11.03 million in gross terms across cbBTC, WETH, USDC and wstETH. CertiK and PeckShield separately estimated losses at roughly $8.7 million. The Moonwell MAMO exploit involved manipulated collateral accounting and oracle pricing for the thinly traded MAMO token. Liquidations started 32 seconds after the final successful borrow. Moonwell said about 8.729 million USDC was burned on Base through Circle’s CCTP and nearly the same amount was received on Ethereum before being converted to DAI. Moonwell cut borrow caps in its Base Core Market and reduced MAMO and WELL supply caps to 1 wei, effectively blocking further activity through the affected parameters. Traders should monitor MAMO, WELL and Base-based lending markets for liquidity stress, governance measures and potential contagion.
Bearish
The expected market impact is bearish, although it is likely to remain concentrated in Moonwell, MAMO, WELL and Base-based DeFi rather than the wider cryptocurrency market. The exploit exposed weaknesses in collateral accounting, oracle pricing and risk limits, while the reported $8.7 million to $9.13 million loss range creates direct confidence and liquidity risks. In the short term, traders may reduce exposure to MAMO and WELL, widen spreads, withdraw liquidity and sell affected assets. The transfer of USDC to Ethereum and conversion to DAI may also prompt monitoring for fund movements and possible recovery efforts. Moonwell’s emergency cap reductions limit additional borrowing risk, but they can further reduce market liquidity and increase volatility. Similar DeFi oracle and low-liquidity collateral exploits have often produced sharp token-price declines, temporary liquidity outflows and increased selling pressure across related protocols. Over the longer term, transparent remediation, asset recovery and stronger oracle safeguards could contain contagion. However, absent a clear recovery plan or compensation mechanism, the incident may weigh on Moonwell’s total value locked, governance confidence and user growth. Broader market indicators such as stablecoin outflows, Base lending utilization and spreads across DeFi pools will help determine whether the event remains protocol-specific or develops into wider risk aversion.