On June 17, 2025, Meta Pool, a platform offering liquid staking services on Ethereum, was hacked, resulting in the theft of approximately 52.5 ETH.
Details of the Meta Pool Hack
The hack exploited a vulnerability in the mpETH token contract used for liquid staking. Attackers managed to create 9,705 mpETH tokens without making a real ether deposit. They manipulated the mint function, allowing token creation without payment.
Meta Pool's Response to the Incident
The Meta Pool development team acted to limit the damage. Transfers for the mpETH token have been suspended until investigations and fixes are completed. Meta Pool has partnered with Blocksec to contain the attack. Importantly, core staked funds have remained safe.
Future Steps and Company Promises
Meta Pool has committed to fully compensating all users affected by the hack. A complete report detailing the incident will be released within the next 48 hours, outlining steps to prevent similar incidents in the future.
The Meta Pool hack highlights the critical importance of security in crypto systems. The company is expected to take necessary measures to protect its users and minimize the likelihood of future incidents.
