Key Takeaways
Matcha Meta's SwapNet platform was exploited for approximately $16.8 million, highlighting critical vulnerabilities in DeFi token permissions. The attack targeted users who had disabled single-use approval settings, allowing the hacker to drain funds. The platform has since disabled the compromised contracts to halt further losses.
- $16.8 Million Stolen: A security breach on SwapNet resulted in significant user losses, with the attacker siphoning funds from wallets with weak permission settings.
- Approval Vulnerability Exploited: The attacker leveraged unlimited token approvals, a common but high-risk feature in DeFi that gives contracts continuous access to user funds.
- Contracts Disabled: In response to the attack, the SwapNet team has taken the affected smart contracts offline to prevent further damage and begin an investigation.
