The Spiral protocol experienced a loss of approximately 10.7 ETH due to a vulnerability in its SpiralHookV2 contract. The contract incorrectly valued collateral using Uniswap V4 pool spot prices without TWAP or price-change limits.
Blockaid detected an ongoing exploit on Symbiosis Finance on BSC where the BridgeV2 contract minted a large amount of syBTC, which was then used to dump approximately 4.39 WBTC on Ethereum's Uniswap V4. The attacker has realized around $336,000 in WBTC proceeds so far.
The Butter Bridge V3.1, part of MAP Protocol and Butter Network, was exploited due to a vulnerability in its retry message verification logic, allowing the minting of fake MAPO tokens. The attacker extracted approximately $180,000. The bridge and related swaps were paused, and a patch is in progress.
Adshares Bridge was exploited on Ethereum, allowing an attacker to mint and dump fake wrapped ADS tokens, draining approximately $628K in ETH and USDC from liquidity pools. The project has offered a bounty for the return of funds.