Ekubo exploit drains $1.42M via stale token approvals
- —About $1.42M stolen from 31 addresses via HuffRouter approvals
- —One victim lost ~17 WBTC and 0.34 cbBTC, 98% of the total
- —The main victim's approval was granted 158 days before the attack
- —Ekubo's founder proposed ERC-8255 expiring approvals on May 6
Why it matters: Unlimited token approvals remain a leading DeFi attack vector, pushing users to revoke permissions and protocols to adopt expiring approvals.
Source: Cointribune