Aquifer

Aquifer allowed the caller to supply the input-side token program used during swaps instead of pinning it to the canonical SPL Token Program. The attacker supplied a malicious program that accepted Aquifer’s CPI transfer instruction and returned success without transferring the required input tokens.

Aquifer failed to verify the actual input-token balance increase and consequently released real output tokens from its vaults without receiving payment.