Security Incident · ETH Ecosystem
ether.fi Liquid Smart Contract Vulnerability: $38.13K Reported Loss
Users of ether.fi Liquid (liquidETH) lost ~15.45 ETH after an attacker exploited missing access control in AtomicQueue.solve() on the caller-supplied solver parameter.
- Reported loss
- $ 38130
- Attack category
- Smart Contract Vulnerability
Incident Overview
The attacker crafted a malicious AtomicRequest, forced already-approved victim addresses to act as solver, and drained funds via existing ERC-20 allowances with transferFrom. About 11 users were affected.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.