defirisk.co
rubric v1.7.0

Prior exploit count

Marinade Finance's assessment for RD-F-077 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

One operational incident found: the May 2025 SAM (Stake Auction Mechanism) mechanism design bug. An inverted unstakePriority calculation allowed validators to reduce bid commitments after winning stake, resulting in ~37,000 SOL (~$5M) in missed staker rewards over ~126 epochs (May 2024 to May 2025). No principal theft; yield loss only. Rekt leaderboard: empty. hacksdatabase grep for marinade/mSOL/MNDE: no direct contract exploit entries. Mango Markets Oct 2022 (mSOL used as collateral) is a dependency-context event, not a Marinade incident. Solana network outages are excluded per assessment scope.

Sources #

  • URL
    Incident Report: 37,000 SOL in Losses — Marinade Governance ForumCommunity incident report: 37,000 SOL in losses from SAM mechanism bug, May 2025retrieved 2026-05-16
  • Internal
    hacksdatabase grep resulthacksdatabase grep for marinade/mSOL/MNDE — no Marinade-specific contract exploit entries found; mango-markets-rekt.md references mSOL only as collateral on Mangoretrieved 2026-05-16

Methodology #

Count the number of distinct incidents in the hack database affecting this protocol.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol marinade factor RD-F-077 score yellow collected_at 2026-05-16 08:48:35