Set Protocol ETHMACOAPY exploit (2026-10-06) — attacker addresses
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-15
- Last updated: 2026-10-16
Set Protocol ETHMACOAPY exploit on EVM, 2026-10-06. DeFiHackLabs summary: SetProtocol - a second RebalancingSetTokenV3 vault (ETHMACOAPY) hit by the same permissionless actualizeFee() divCeil rounding, the attacker issues the rebalancing set then donates the residual base set into the vault own backing so the zero-fee recompute bumps unitShares from 12253 to 12264, then redeems the same quantity for more collateral than was deposited, the ~116,000 WETH issue/redeem size. Loss as recorded by DeFiHackLabs: 4.047988247781965824 WETH to the attacker in the first tx (reproduced to the wei) on…
Other addresses in this report: 0xfc3facd67138966ab0c841e905b0c4bca1abe92f