SpookySwap

SpookySwap's frontend domain was compromised on November 18, 2023, with malicious phishing code injected to impersonate legitimate contract interactions. Users accessing the compromised domain were tricked into signing transactions draining their wallets.

The attack resulted in $5K in realized losses before the team identified and removed the malicious code.