Aperture Finance reported on January 25 an exploit that affected the protocol’s V3 and V4 contracts, with estimated losses of $3.67 million. The attack originated from an arbitrary-call vulnerability tied to the “Instant Liquidity Management” features.
A helper module executed low-level calls using user-supplied calldata without sufficient validation. That flaw allowed attackers to reuse existing approvals and drain tokens through transferFrom calls, as well as enable transfers of Uniswap V3 position NFTs. Users who had activated the instant liquidity features were the most affected.
The company stated that the incident was contained and that the compromised web application functions were disabled. Aperture Finance launched a forensic investigation with external firms and is coordinating with authorities to trace the funds.
Source: https://x.com/PeckShieldAlert/status/2019303858779091362
Disclaimer: Crypto Economy Flash News are based on verified public and official sources. Their purpose is to provide fast, factual updates about relevant events in the crypto and blockchain ecosystem.
This information does not constitute financial advice or investment recommendation. Readers are encouraged to verify all details through official project channels before making any related decisions
