Ekubo — Token Approval Abuse
A token approval abuse vulnerability in Ekubo Protocol's custom extension contract on Ethereum led to a loss of approximately $1.4 million. Users who had previously approved the V2 contract as a token spender were exposed.
- Estimated loss
- $1,400,000
- Protocols
- Ekubo Protocol
- Chains
- Ethereum
- Confidence
- High
- First seen
- 5 May 2026, 00:00 UTC