zkSync-Based DEX Merlin Drained of $1M During Public Token Sale Despite ‘Audit’

Exploiters drained some $850,000 worth of USD Coin (USDC) from Merlin on Wednesday morning, with some more relatively illiquid tokens drained. As such, blockchain data suggested that some entity with control of the liquidity pool was able to drain the funds easily – meaning this was not a complex or sophisticated exploit.