Ekubo Protocol's custom extension contract was attacked, resulting in a loss of approximately 1.4 million dollars

By: rootdata|2026/05/06 10:42:01
0
Share
copy

According to the security agency Blockaid (@blockaid_), the Ekubo Protocol is currently experiencing ongoing attacks on a v2 custom extension contract on Ethereum, resulting in a loss of approximately $1.4 million.

The root cause of the attack lies in the fact that the IPayer.pay callback of this extension does not effectively restrict the source of the parameters, allowing attackers to control the payer, token, and amount parameters, thereby arbitrarily transferring authorized tokens. Users of the core Ekubo protocol are not affected, but users who have authorized this v2 contract as a token spender face direct risks. Blockaid recommends that relevant users immediately revoke their authorization.

-- Price

--

You may also like

The toll station at Hormuz and the RMB that cannot be bought

The disorder of the US dollar is giving rise to a new situation in global settlement: gold is being redefined as a "bridge," the CIPS system is expanding rapidly, and global funds are quietly opening up a new channel for the renminbi, which is "hard to obtain."

Interview with Coinbase Institutional's Strategic Head: The Institutionalization of Crypto Reaches a Critical Point

Coinbase executives provide an in-depth analysis: Unfazed by short-term market panic, institutions are accelerating their entry, and tokenization along with the "exchange of everything" is about to completely reconstruct the global financial infrastructure.

Dialogue with Agora CEO Nick: The battle for stablecoin licenses has just begun

Agora strikes: officially applies for a federal trust bank license in the United States, elevating from a stablecoin issuer to "underlying financial infrastructure," targeting the trillion-dollar enterprise payment and B2B settlement market.

Morning Report | a16z Crypto completes $2.2 billion fundraising for its fifth fund; Bullish invests $4.2 billion to acquire share transfer agency Equiniti; PayPal's Q1 performance exceeds expectations

Overview of Important Market Events on May 5th

a16z Crypto: What We See Behind the $2.2 Billion New Fund

After the noise subsides, what remains is often more useful than it appeared at its peak and more enduring than it seemed at its lowest point.

Web3 is dead, Web2+3 should rise

We are not aiming to hold a self-indulgent party for Web3 practitioners, but rather to build a bridge for rational connection between Web2 and Web3.

Contents

Popular coins

Latest Crypto News

Read more
iconiconiconiconiconiconicon
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com