Share this article
Stablecoin Cashio Suffers 'Infinite Glitch' Exploit, TVL Drops by $28M
Cashio's CASH token has lost almost all its value, as of the time of writing.
Updated May 11, 2023, 5:29 p.m. Published Mar 23, 2022, 11:56 a.m.
Solana-based stablecoin protocol Cashio was exploited in an “infinite glitch” attack, developers said on Wednesday.
- Following the exploit, the value of Cashio's CASH token dropped to nearly zero.
- “Please do not mint any CASH. There is an infinite mint glitch. We are investigating the issue and we believe we have found the root cause. Please withdraw your funds from pools,” the team wrote in a tweet.
Please do not mint any CASH. There is an infinite mint glitch.
— Cashio ($CASH) 💵 (@CashioApp) March 23, 2022
We are investigating the issue and we believe we have found the root cause. Please withdraw your funds from pools. We will publish a postmortem ASAP.
STORY CONTINUES BELOW
- CASH is a stablecoin pegged to the U.S .dollar and is backed by USDC and USDT via a liquidity pool on Saber, a Solana-based market maker. Users can mint their CASH by providing liquidity with USDT and USDC.
- The incident on Wednesday allowed the hacker to manipulate Cashio’s smart contracts to mint an infinite supply of CASH without providing any liquidity in return. Blockchain data shows over 2 billion CASH were minted, without any USDC or USDT backing.
- The hacker used the newly minted tokens to exchange them for stablecoins on Cashio’s liquidity pools. Data from tracking tool DeFiLlama shows the total value locked on Cashio dropped by $28 million after the attack.
- Stablecoins based on other protocols has suffered similar attacks in the past. Polygon-based Safedollar dropped to $0 after an exploit in June 2021, with both USDC and USDT siphoned off by the hacker at the time.
More For You
What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
Stripe-Backed Blockchain Tempo Starts Testnet; Kalshi, Mastercard, UBS Added as Partners
Tempo, built by Stripe and Paradigm, has started testing payment-focused blockchain and has onboard a slew of institutional partners.
What to know:
- Stripe and Paradigm’s Tempo blockchain has launched its public testnet for real-world payment testing.
- Kalshi, Klarna, Mastercard and UBS are among a wave of new institutional partners now involved in the project.
- Tempo aims to offer low-cost, fast-settlement infrastructure for global payments as stablecoin adoption is accelerating globally.
Top Stories
