Meta Pool Suffers $27M Exploit; Solana DEX Jupiter (JUP) Pauses DAO Votes Amid Trust Issues

According to @PolynomialFi, the multi-chain liquid staking protocol Meta Pool has been exploited for $27 million due to a smart contract bug that allowed for the free minting of its mpETH token. Blockchain security firm PeckShield reported the bug, noting that while an attacker minted $27 million in mpETH, they could only exchange 10 ETH (approximately $25,000) due to low liquidity on Uniswap. The protocol's MPDAO governance token currently trades at $0.02. In separate news, the Solana-based decentralized exchange Jupiter is pausing all DAO votes until the end of 2025, citing a "breakdown in trust" and a need to focus on a critical development period for DeFi. Jupiter executive Kash Dhanda confirmed that while votes are paused, active staking rewards (ASR) will continue at 50 million JUP per quarter. The JUP token has declined 21.8% over the past 30 days and was trading at $0.40 with minimal reaction to the news.
SourceAnalysis
The decentralized finance (DeFi) sector faced a turbulent week, marked by a significant security breach and a major governance overhaul on two prominent protocols. Multi-chain liquid staking platform Meta Pool was hit by a smart contract exploit leading to a potential loss of $27 million, while Solana's leading DEX, Jupiter, announced a pause on all DAO voting until 2026. These events highlight persistent risks in the DeFi space, impacting token prices and trader sentiment across the Ethereum and Solana ecosystems. For traders, these incidents serve as a critical reminder of the dual nature of DeFi: immense innovation coupled with inherent smart contract and governance vulnerabilities.
DeFi Security Under Scrutiny After $27M Meta Pool Exploit
On Tuesday, the DeFi community was alerted to a critical vulnerability in Meta Pool's smart contracts. According to a report from blockchain security firm PeckShield, a bug in the staking contract enabled an attacker to mint an unrestricted amount of mpETH, the protocol's liquid staking token. The attacker successfully created $27 million worth of these tokens. However, the real damage was mitigated by a severe lack of liquidity on the corresponding Uniswap pool. The attacker was only able to cash out approximately 10 ETH, valued at around $25,000. This incident underscores a crucial aspect of DeFi exploits: the ability to create unbacked tokens is worthless without a deep market to sell them into. Interestingly, Etherscan data revealed that an account labeled "MEV Frontrunner Yoink" had preemptively removed 90 ETH of liquidity, a move that likely thwarted the attacker's ability to extract more value.
This exploit is part of a worrying trend. According to security firm CertiK, May 2024 saw over $302 million lost to various hacks and exploits, and this latest event continues that pattern into the new month. Despite the attack, data from DefiLlama shows Meta Pool's Total Value Locked (TVL) remains around $75 million, though the protocol's MPDAO governance token has plummeted to $0.02 with minimal trading volume. From a trading perspective, the direct impact on Ethereum's price was muted. The ETH/USDT pair saw a modest 1.27% decline, trading within a 24-hour range of $2476.41 to $2555.80. This resilience suggests the market has become somewhat desensitized to smaller-scale DeFi exploits, containing the fallout to the specific protocol rather than the entire ecosystem. However, the ETH/BTC pair did slip by 0.64% to 0.0233, indicating a slight preference for Bitcoin's perceived safety amidst DeFi uncertainty.
Jupiter's Governance Shift Rattles Solana Ecosystem
In a move that signals a growing crisis in decentralized governance, Solana-based DEX Jupiter announced it is pausing all DAO votes until the end of 2025. In a detailed post, Jupiter executive Kash Dhanda described the current DAO structure as dysfunctional, stating it was not "working as intended." He pointed to a "breakdown in trust" and a "perpetual FUD cycle" that was hindering progress. Dhanda explained the protocol is in a "critical period" to define the future of DeFi and that the current divisive governance model was an obstacle. Governance is slated to return in 2026 with a completely new framework. This decision follows a similar move by Yuga Labs, which recently proposed scrapping its ApeCoin DAO due to systemic inefficiencies, suggesting a broader trend of DAOs failing to live up to their ideals.
The market reaction for Jupiter's native token, JUP, has been telling. The token has shed 21.8% of its value over the last 30 days, reflecting the broader market downturn and internal strife. The announcement itself did not trigger a sharp sell-off; JUP traded sideways around $0.40, suggesting the negative sentiment was already priced in. For Solana (SOL), the news adds another layer of complexity. The SOL/USDT pair traded down to $147.47, a 24-hour loss of 1.8%, with volume at 1557 SOL. While the broader market is a factor, instability in its flagship DEX is a clear headwind. The SOL/ETH pair, a key gauge of ecosystem strength, showed a notable 2.59% gain for SOL, trading at 0.0680. This indicates that despite Jupiter's internal issues, traders may still see relative value in Solana over Ethereum in the short term, possibly due to other factors like lower transaction fees or activity in other parts of the Solana ecosystem. However, the long-term implications of a major project admitting its decentralized governance has failed could weigh on SOL's price if the trend spreads.
Polynomial
@PolynomialFiBuilt on Ethereum, built on the Superchain.