On October 4, 2025 Abracadabra Money on Ethereum suffered a critical exploit of the cook() multi-action function where improper state handling allowed attackers to bypass solvency checks: Action 5 set needsSolvencyCheck=true, but Action 0 reset the CookStatus, enabling under-collateralized borrowing and withdrawal of 1.79 million MIM tokens.