Attackers drain $1.4M in wrapped bitcoin from DeFi protocol Ekubo in approval-based exploit
The Block
DeFi protocol Ekubo lost $1.4 million in wrapped bitcoin due to an access control flaw in its EVM swap router contracts.Summary
The DeFi protocol Ekubo suffered a $1.4 million loss in wrapped bitcoin (WBTC) after attackers exploited an access control vulnerability in its EVM swap router contracts. The flaw allowed unauthorized parties to drain funds from wallets that had previously granted token approvals. While the protocol's core Starknet operations remain secure, Ekubo urged users to revoke outstanding approvals as the immutable nature of the contracts requires a redeployment to fix the issue.
(Source：The Block)