Leaderboard
173All-time rank
Matcha
Jan 25, 2026
$13.4M
Lost
$13.4M
Recovered
$0
Net loss
$13.4M
Unrecovered0% recovered
43M on January 25, 2026 when the SwapNet aggregator was exploited for arbitrary-call ability. The vulnerability allowed unauthorized access to user-approved tokens across Base and Ethereum.
The frontend UI inadequately warned about approval risks.
- Target
- DeFi
- Classification
- Frontend & Infrastructure
- Technique
- Frontend Compromise
- Attribution
- Unknown
- Chains
BaseEthereum
Event timeline
- Jan 25, 2026Exploit executed — $13.4M drained via frontend compromise
- Attributed to Unknown
- Recovery status Unrecovered 0%