BlockSec: SwapNet and Aperture Finance Contracts Hacked, Loss Exceeds $17 Million, Attacker Exploits Permission Flaw to Transfer Assets

BlockBeats News, January 26th, BlockSec Phalcon announced that a few hours ago a series of suspicious transactions were detected, targeting a contract deployed by two creators, involving Ethereum, Arbitrum, Base, and BSC, with a total loss exceeding $17 million.

These attacked contracts were not open source and appear to have arbitrary call capabilities. The attacker exploited existing token allowances to transfer and drain the contract's assets by executing transferFrom.

Affected contract deployers:

0xbeef63AE5a2102506e8a352a5bB32aA8B30B3112, with a loss of approximately $3.67 million, which is associated with or related to Aperture Finance;

0x9cb8d9BaE84830b7f5F11ee5048c04a80b8514BA, with a loss of approximately $13.41 million, which is associated with or related to SwapNet.

Source

Correction/Report

RelatedRecommended

Security Special Issue 05｜OKX Web3 & BlockSec: @All Whales, the Latest Risk Hedging Strategy in the DeFi World

Founder of BlockSec's speech: Code auditing alone is not enough for security.

How does BlockSec use the Phalcon Block system to intercept hacker attacks and recover protocol losses?

With a transaction volume of 1.3 billion US dollars and 150,000 users, what exactly is the Aperture Finance platform?

The intention track is still heating up. Aperture introduced ChatGPT as an interactive method, and AI narrative has added new highlights. The project team may have further currency issuance arrangements and publicity activities for Airdrop in the near future.

Dialogue with Aperture Finance CEO: How to create a new intent-driven paradigm with intent as the main focus and AI as the auxiliary?

Julian talked about his transformation from translator to Web3 entrepreneur, and introduced how his company Aperture Finance applies AI and intent architecture to optimize crypto transactions.

Customizable liquidity provision strategies, who is Aperture’s MaaS suite suitable for?

On-Chain Activity