Namada MASP Shielded-Pool IBC Drain

On June 19, 2026, Namada lost approximately $600,000 when an attacker exploited the protocol's Multi-Asset Shielded Pool (MASP) through a flaw in its IBC transfer logic, sweeping shielded cross-chain assets out of the privacy pool. The drain was briefly masked because a stale indexer continued displaying the funds as available while live RPC queries already showed zero on-chain balances.

What happened

Namada is a privacy-focused, IBC-connected chain whose MASP lets users hold and transfer multiple assets inside a single shielded set. A flaw in how the protocol processed IBC transfers let the attacker move shielded balances out of the pool and bridge them cross-chain. The drained assets included ATOM, USDC, OSMO, TIA, and NYM. Because shielded-pool accounting is private by design, the loss was unusually hard to spot through ordinary dashboards — the indexer powering balance views lagged the chain, so the pool appeared intact even as the assets had already been swept. DefiLlama logged the incident in its hacks database as a roughly $600,000 "protocol logic" exploit via an IBC transfer-logic flaw.

Aftermath

Namada confirmed the exploit and opened a security review, saying it was coordinating with stakeholders to contain the issue and prevent further losses; at disclosure the team had not detailed the full extent of the damage or confirmed any recovery. As of this writing the funds remain unrecovered and the investigation is ongoing.

Why it matters

The Namada incident pairs two awkward truths about privacy chains. First, IBC remains a fragile trust boundary — the same class of transfer-logic and channel-validation gaps that drained Secret Network, Gravity Bridge, and Syscoin reappears here. Second, privacy cuts both ways: a shielded pool that hides balances from observers also hides a drain in progress, and when the monitoring indexer lags the chain, defenders lose the very signal they need to react. Strong privacy guarantees raise the bar for transparent, real-time reconciliation rather than lowering it.