An infinite mint assault happens when an undesirable entity or hacker mints an abnormally large number of tokens within a protocol, increasing its supply to an unhealthy level and devaluing each token. Typically, the process is quick, with attackers taking home millions of dollars in tokens. Attackers frequently dump all minted tokens on the market, causing the price to plummet.

Blockchain systems are particularly vulnerable to this type of attack due to security flaws that allow hackers to exploit bugs and other code weaknesses. Hackers used shield mining contracts in the Cover system attack to obtain unauthorised crypto rewards from the system. The hacker was able to steal 40 quintillion tokens from the Cover staking pool, leading the token price to drop by 97%. In this case, the attacker sold about 11,700 coins via 1inch and took around $5 million in tokens.

An infinite mint attack occurs when a hacker exploits a weakness in a cryptocurrency token’s smart contract to create an extremely large or unlimited number of new tokens. Token contracts are normally designed with rules that restrict minting and specify which addresses are authorised to create additional tokens. A coding error or inadequate access control can allow an attacker to bypass these restrictions.

After generating unauthorised tokens, the attacker may sell them on a decentralised exchange or trade them for more established cryptocurrencies. If a huge quantity of tokens enters circulation, the supply can increase dramatically, potentially causing the token’s market price to collapse and harming legitimate investors.

These attacks can cause severe financial and reputational damage to a project. Developers can reduce the risk by implementing strict minting permissions, maximum supply controls, secure smart-contract architecture, independent audits, and comprehensive testing. Monitoring unusual token issuance can also help identify suspicious activity quickly.