dTRINITY

The dTRINITY swap adapter suffered a missing authorization check in its swapLiquidity() function. The attacker called the swap function using addresses of victims who had previously approved the adapter during testing.

Malicious swap routes sent collateral deposits directly to attacker-controlled addresses while returning minimal amounts to pass validation, draining $56K.