BlockSec Uncovers $17M Vulnerability in SwapNet and Aperture Finance

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Arbitrary Call Vulnerabilities Lead to $17 Million Loss in SwapNet and Aperture Finance A security flaw in contracts on Ethereum, Arbitrum, Base, and BSC allowed attackers to exploit arbitrary call capabilities, resulting in a loss of $17 million for SwapNet and Aperture Finance. The vulnerability was reported by BlockSec, which highlighted the exploitation of existing token approvals and the use of transferFrom functionality. 2 sources 46