Ekubo Hack

Close to $1.42M was stolen from users of Ekubo, a DEX that originated on Starknet and expanded to Ethereum and Arbitrum. A calldata parsing bug in Ekubo's gas-optimized HuffRouter contracts allowed attackers to spend the token approvals of anyone who had approved them. Ekubo's core contracts, liquidity providers and its Starknet deployment were unaffected. Ekubo published a full post-mortem and funded an on-chain recovery fund to compensate victims.

影響を受けたユーザーは、承認を取り消さない限りリスクにさらされ続けるため、以下の Revoke.cash エクスプロイトチェッカーを使用して、ご自身が安全であることを確認することをお勧めします。