PANews reported on November 25 that Yu Xian, founder of SlowMist, posted that some users may not have received the Monad airdrop. He suggested checking whether the wallet address they linked on the airdrop claim page was the intended address. If not, they may have encountered a problem similar to that of user @Onefly: their wallet address was linked to a hacker's address, and the official airdrop was then sent to the hacker's address.

They also stated that a white-hat hacker had previously shared a vulnerability with them. This vulnerability had a prerequisite: if someone hijacked a user's session on the Monad airdrop claim page, they could change the claim wallet address without further confirmation. They suggested that Monad investigate @Onefly's issue, such as checking the change logs of the claim wallet address.