Security Incident
Kame Aggregator Contract Vulnerability: $1.32M Reported Loss
Kame Aggregator suffered an exploit due to a design flaw in the swap() function, which allowed arbitrary executor calls.
- Reported loss
- $ 1,320,000
- Attack category
- Contract Vulnerability
Incident Overview
This vulnerability enabled attackers to transfer tokens authorized to the AggregationRouter by users, particularly those with unlimited or oversized approvals. The total value of affected assets was approximately $1.32 million, of which around $946,000 was recovered by the Kame team from the primary exploiter, and about $22,000 was recovered by white-hat hackers.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.