Abracadabra's Wind-Down Proposal: $21M in Bad Debt, Four Cents of Backing per MIM, and $8.3M in Unexplained Transfers
The DeFi project behind Magic Internet Money proposed closing operations, citing approximately $21 million in bad debt following repeated exploits. The proposal identified around 22 million outstanding MIM tokens but only $900,000 in “actionable backing,” equivalent to roughly four cents per token. Critics questioned that accounting, pointing to approximately $8.3 million in earlier treasury transfers that were neither explained nor included in the proposal's redemption calculations. At publication, only two voters had participated in the wind-down vote; allegations of treasury “looting” remained unresolved.
This article is published for educational and informational purposes only. It does not constitute legal, financial, or investment advice. Nothing in this article should be relied upon as the sole basis for any decision relating to the security, investment value, or legal standing of any protocol or digital asset.
This is a preliminary analysis based on publicly available reporting and open-source code review. An official post-mortem has not yet been published by the affected protocol at time of writing. Any code samples included are illustrative reconstructions for educational purposes only and do not represent confirmed exploit code. This article will be updated when authoritative technical disclosure is available.
Information published on any code vulnerabilities must not be used to attack, test, or probe any protocol or system without explicit authorisation from its owner. Use of this content is subject to our Terms of Service and Privacy Policy.
What happened
On September 30, 2026, Protos reported that Abracadabra, the DeFi lending project behind the Magic Internet Money (MIM) stablecoin, had put forward a governance proposal to wind down operations. The proposal concluded that MIM had "no viable path back to parity" and cited approximately $21 million in bad debt built up after repeated exploits.
The proposal counted around 22 million MIM outstanding against only $900,000 in what it called "actionable backing." That works out to roughly four cents per token.
Critics questioned that accounting. Protos highlighted roughly $8.3 million in earlier treasury transfers that the proposal neither explained nor included in its redemption calculations. When Protos published, voting was still open and only two voters had taken part: 100 million SPELL in favor and 500,000 SPELL against.
Root cause
The proposal blames Abracadabra's position on hacks. The project suffered three major exploits in under two years, each one adding bad debt to a stablecoin that relied on loans being backed by collateral.
Three exploits in under two years
- January 30, 2024: a smart contract exploit took approximately $6.5 million and briefly pushed MIM below $0.77.
- March 25, 2025: a flash-loan-assisted exploit took approximately $13 million, with the attacker ending up with around 6,262 ETH.
- October 4, 2025: excessive borrowing against collateral took approximately $1.8 million (Protos later rounded this to $1.7 million). Abracadabra said the affected contracts were deprecated and that it bought back the stolen assets using treasury funds.
For a stablecoin like MIM, each exploit removes backing without removing tokens. MIM is minted when users borrow against collateral. When an attacker takes collateral or borrows without enough of it, the MIM stays in circulation while the assets meant to support it are gone. Repeat that enough times and the gap between supply and backing becomes too large to close.
Governance and treasury questions
Hacks are not the whole story. Protos laid out a series of governance and treasury events from 2026 that the wind-down proposal did not address:
// June 2026: "strategic transition and stewardship" proposal
voters = 2
votes_for = 5B+ SPELL
votes_against = 0
outcome = stewardship moves to an Anubis-led group
stated_aim = revitalize the project
// June 8 and 11: treasury-related MIM sales
proceeds = ~$500K (per commentary cited by Protos)
context = MIM losing its peg
// July 5: Abracadabra promises peg roadmap "coming this week"
follow_up = no further posts by Sep 30 (per Protos)
// July 14: Safe transfers (per Pharos investigation, July 15)
total = ~$8.3M
eth_weth = ~2,142 to a Binance-tagged deposit address
stablecoins = ~$4.3M to an unlabeled address
// September 30: wind-down proposal
outstanding = ~22M MIM
backing = $900K "actionable"
per_token = ~$0.04
bad_debt = ~$21M
votes_so_far = 2 voters (100M SPELL for, 500K against)The central open question is simple. If the proposal says only $900,000 in backing remains, where did the roughly $8.3 million moved from Abracadabra-controlled Safes in July go, and why is it not part of the redemption calculation?
What could have been done
- Fix the class of bug, not just the instance. Three exploits in under two years, including one in deprecated contracts, point to a codebase where old and new contracts stayed live with shared risk. Retiring deprecated markets on-chain and auditing the whole lending system after each incident would have reduced repeat losses.
- Cap MIM issuance per market. Borrow caps tied to each collateral type's liquidity and audit status limit how much unbacked MIM a single bug can create.
- Publish backing in real time. A public dashboard showing outstanding MIM against verifiable collateral and treasury assets would let holders see the gap growing long before a wind-down vote.
- Set quorum rules that match the stakes. A transfer of project stewardship passed with two voters, and the wind-down vote had two voters at the time of reporting. Minimum participation thresholds and timelocks on treasury-affecting proposals give the wider community time to respond.
- Put treasury movements behind public, timelocked approvals. Moves of millions from project Safes should be announced and explained in advance. Unexplained transfers during a depeg are exactly what erodes trust in a wind-down plan.
- Account for every asset in a wind-down. A redemption plan should reconcile all treasury assets and recent outflows, not only the backing that is easiest to act on. Leaving out $8.3 million in recent transfers invites the claims now being made.
Lessons for the industry
Abracadabra shows how repeated exploits add up. No single hack ended the project. Each one left bad debt, weakened MIM's peg, and drained treasury funds used to cover losses. Over time the gap between tokens in circulation and real backing became too large to close. A stablecoin protocol that survives an exploit still carries its cost.
The proposal also shows the limits of token-weighted governance when participation is thin. Decisions that moved project control and could close the protocol were carried by a handful of large holders. That is legal under the project's rules, but it leaves ordinary MIM holders with little say over how what remains is shared out.
A wind-down is the last point where a project can earn back trust, and transparency matters most there. Holders being offered four cents per token deserve a full account of where the rest went: losses to hackers, buybacks, the June MIM sales, and the July transfers. Without that, a reasonable shutdown plan will be read as something worse, whether or not it is.
- 01Protos, Abracadabra blames hacks for shutdown amid 'looting' claims
- 02Web3 Is Going Just Great, Abracadabra exploited for ~$6.5 million (January 2024)
- 03Web3 Is Going Just Great, Abracadabra loses ~$13 million (March 2025)
- 04Web3 Is Going Just Great, Third major Abracadabra exploit (October 2025)