Infinite Mint Attack

An infinite mint attack is an exploit in which an attacker finds a flaw in a token's smart contract, a protocol's reward system or a cross-chain bridge that lets them create, or mint, a vast quantity of tokens they are not entitled to. The new tokens have no backing, but for a short time they can be sold on decentralized exchanges or used as collateral to borrow real assets. By the time the market reacts, the attacker has extracted value, and the token's price has usually collapsed.

"Infinite" is an exaggeration: the attacker typically mints a very large but finite amount, sometimes trillions of times the existing supply. The attack is one of the most damaging categories of exploit in decentralized finance, because it hurts every existing holder at once by diluting the supply, and because minted tokens can spread quickly into lending pools and other protocols. It is distinct from a flash loan attack, though the two are sometimes combined.

Imagine a gold-backed voucher scheme where the voucher printer is supposed to check for a gold deposit before printing. A thief discovers that a fake deposit slip fools the printer, prints millions of vouchers and rushes to swap them for real goods before anyone notices. Once the trick comes out, every voucher in circulation, including honest ones, loses most of its value.

In crypto, the "printer" is a piece of code that creates tokens. If it does not check properly who is allowed to create them, or whether real assets were deposited, an attacker can make as many as they like.

• Missing access controls. A mint function that should be callable only by an owner or a specific contract is left open, or its owner key is stolen.
• Accounting errors. Reward or staking contracts calculate entitlements incorrectly, so a manipulated deposit produces an enormous reward.
• Bridge verification failures. A blockchain bridge mints tokens on one chain when it believes assets were locked on another. If the proof or signature check can be fooled, the bridge mints wrapped tokens with nothing behind them.
• Compromised keys. Where minting depends on a small set of administrators, theft of their keys gives an attacker the power to mint.

In December 2020, an attacker exploited a flaw in the staking rewards contract of Cover Protocol to mint an enormous number of COVER tokens, crashing the price; the attacker, describing themselves as a white-hat hacker, returned some funds. In February 2022, a signature-verification flaw in the Wormhole bridge let an attacker mint about 120,000 wrapped ether on Solana without depositing any ether, a loss of roughly 320 million dollars at the time that was covered by the project's backers. In October 2022, an attacker forged a proof on a bridge used by BNB Chain and minted 2 million BNB, prompting validators to pause the chain while most of the funds were frozen before they could be moved off it.

Holders of the affected token see its price fall sharply as the market is flooded. Liquidity pools on a decentralized exchange can be drained of their other asset. Lending protocols that accepted the token as collateral may be left with bad debt, and stablecoins or wrapped tokens may lose their peg if unbacked units are mixed with backed ones. Confidence in the project usually suffers for a long time, and some never recover.

• Strict access control. Mint functions should be limited to specific roles, ideally governed by a multi-sig wallet and time delays.
• Supply caps and rate limits. Hard limits on how many tokens can be minted per period reduce the damage from any single flaw.
• Audits and testing. Independent audits, formal verification and bug bounties help find flaws before attackers do.
• Monitoring. Real-time alerts on unusual minting let teams pause contracts quickly, although pause powers themselves add centralization.
• Collateral rules. Lending protocols can limit how much of a newly listed or thinly traded token they accept, limiting contagion.

Infinite mint attacks illustrate a broader point in tokenomics: a token's supply is only as reliable as the code and keys that control its creation. Users can check whether a token's contract has an owner-controlled mint function, and how it is governed, before holding it.