Leaderboard
405All-time rank
S

SquidRouterModule

May 4, 2026

$3.2M
Lost
$3.2M
Recovered
$0
Net loss
$3.2M
Unrecovered0% recovered

SquidRouterModule, a third-party Gnosis Safe module for Squid Router, was exploited via a verification error in executeSameChainActions(). The function accepted a publicly available constant string as proof of message security.

2M worth into DAI.

Target
DeFi
Classification
Access Control
Technique
Improper Access Control
Attribution
Unknown
Chains
EthereumBase

Event timeline

  1. May 4, 2026
    Exploit executed — $3.2M drained via improper access control
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents