Wrapped Bitcoin (WBTC)

🚨 $1.4M drained from @EkuboProtocol

17 WBTC. 85 times. One transaction.
No flashloan. No oracle manipulation.

A public function with blind calldata forwarding lets the attacker hijack a privileged callback and drain any wallet that had approved the protocol. https://t.co/nSl2XPsyJa

Early this morning I saw another theft report; I have to say this year has been the year with the most theft incidents, and April has been the most frequent month! Reviewing the projects stolen this year, see if any of your projects were affected:

1. 8Truebit $26.40 million – old smart contract integer overflow/minting vulnerability.

1 Jan Step Finance: $27.00 million. Private key/vault wallet leak.

1 Jan SwapNet: $13.40 million. Unlimited approval/arbitrary call vulnerability.

Feb https://t.co/HQWyjp5Vwc $10.00 million. Oracle manipulation.

Feb IoTeX Bridge $8.80 million.

Mar Resolv Labs $25.30 million. KMS vulnerability leading to unlimited minting of unbacked USR stablecoin, causing de‑pegging and cascading bad debt.

Mar Kraken $18.20 million – transfer error.

Apr 1 Drift Protocol: $285 million. Through social engineering + fake collateral + pre‑signed transactions, emptied the vault in a short time.

Apr 12 Hyperbridge $2.50 million, forged cross‑chain proof to mint DOT.

Apr 16 Grinex $15.00 million – suspected insider or exit scam.

Apr 16 Rhea Finance $18.40 million. Oracle + slippage logic manipulation.

Apr 18 Kelp DAO $293 million. Exploited LayerZero cross‑chain bridge vulnerability, attackers stole about 116,500 rsETH.

Apr 22 Volo $3.50 million – security vulnerability.

There is an active security incident on Ekubo swap router contract on EVM chains only. Liquidity providers are not affected. Starknet is not affected.

We are investigating the scope of the issue, but to be safe revoke all outstanding approvals: https://t.co/9vHDLVjQWP