Leaderboard
380All-time rank
Aperture LM
Jan 25, 2026
$3.7M
Lost
$3.7M
Recovered
$0
Net loss
$3.7M
Unrecovered0% recovered
67M via arbitrary external call vulnerability. Insufficient validation allowed attackers to abuse existing ERC-20 and ERC-721 approvals and drain assets without key compromise.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Token Approval Abuse
- Attribution
- Unknown
- Chains
EthereumBaseBSC
Event timeline
- Jan 25, 2026Exploit executed — $3.7M drained via token approval abuse
- Attributed to Unknown
- Recovery status Unrecovered 0%