Leaderboard
587All-time rank
G
Giddy
Apr 23, 2026
$1.3M
Lost
$1.3M
Recovered
$0
Net loss
$1.3M
Unrecovered0% recovered
3M via incomplete EIP-712 signature coverage. Unvalidated parameters (aggregator, fromToken, toToken, amount) in SwapInfo structure allowed attackers to manipulate transaction approvals.
How the exploit worked
View reproducible PoCIncomplete Signature Coverage.
Lost: $1.3M
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Input Validation
- Technique
- Incomplete Signature Coverage
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Apr 23, 2026Exploit executed — $1.3M drained via incomplete signature coverage
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)