Ekubo Hack

Close to $1.42M was stolen from users of Ekubo, a DEX that originated on Starknet and expanded to Ethereum and Arbitrum. A calldata parsing bug in Ekubo's gas-optimized HuffRouter contracts allowed attackers to spend the token approvals of anyone who had approved them. Ekubo's core contracts, liquidity providers and its Starknet deployment were unaffected. Ekubo published a full post-mortem and funded an on-chain recovery fund to compensate victims.

受影响的用户只要没有撤销他们的授权，就仍处于风险之中。因此我们建议您使用下方的 Revoke.cash 漏洞检查器，以确保您的安全。