Matcha Meta urged users to revoke one-time approvals for SwapNet’s router contract after a smart-contract vulnerability saw as much as $16.8 million stolen on the Base blockchain.
Decentralized exchange (DEX) aggregator Matcha Meta suffered a security breach on Sunday through one of its primary liquidity providers, SwapNet, in the latest cyberattack tied to exploiting smart-contract vulnerabilities.
Matcha Meta disclosed the breach in a post on X on Sunday, warning that users who had previously granted token approvals to SwapNet’s router contract may be at risk. The protocol urged users to immediately revoke all approvals granted to SwapNet’s router contract to prevent further losses.
Estimates of the stolen funds vary. Blockchain security company CertiK said about $13.3 million was taken, while PeckShield said at least $16.8 million was stolen on the Base network.
