-
Attackers drain $1.4M in wrapped bitcoin from DeFi protocol Ekubo in approval-based exploit
Ekubo Protocol lost roughly $1.4 million in wrapped bitcoin after attackers exploited an access control flaw in its EVM swap router contracts, adding another incident to an already difficult year for DeFi security. Ekubo is a concentrated liquidity AMM originally built on Starknet that expanded to Ethereum and Arbitrum, known for its singleton architecture and modular extension system. The attack targeted a vulnerable payment callback flaw within Ekubo's v2 EVM extension contracts, according to blockchain security firm Blockaid. The contracts accepted payer, token, and amount parameters from attacker-controlled ... (full story)