On April 29, 2026, an attacker exploited a logic flaw in the SWEAT token contract on NEAR Protocol, draining 13.71B SWEAT tokens (~$3.5M) from foundation wallets within 30 seconds via a malicious drain contract. Stolen tokens were quickly liquidated via MEXC and Rhea Finance; Sweat Foundation patched the contract and restored all external user balances.

Sweat Foundation was exploited. An attacker drained approximately 13.71 billion SWEAT tokens (about 65% of total supply) from multiple foundation-controlled accounts within roughly 30 seconds, resulting in a loss of about $3.5 million. The attacker exploited a vulnerability in the SWEAT token contract using a custom drainer contract, then attempted to liquidate and bridge the funds via Ref Finance and Wormhole. The team quickly paused the contract, coordinated freezes with MEXC, and restored all external user balances.