Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Aperture Finance Smart Contract Vulnerability: $3.67M Reported Loss

·Historical incident record

Incident Overview

Aperture Finance (Aperture LM) was exploited for approximately $3.67 million across Ethereum, Base, Arbitrum, and BSC. The root cause was an arbitrary-call vulnerability in its closed-source V3/V4 contracts due to insufficient input validation on low-level calls. Attackers abused existing user token and Uniswap V3 LP NFT approvals to drain funds via transferFrom operations. The team paused affected features, urged users to revoke approvals, and published a security incident analysis.

Sources & References

Original incident referencehttps://x.com/ApertureFinance/status/2015938720453820752 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    SwapNet

    Attack methodSmart Contract Vulnerability
    Reported loss$ 13,430,000
  2. Incident date
    Target

    SagaEVM

    Attack methodSmart Contract Vulnerability
    Reported loss$ 7,000,000
  3. Incident date
    Target

    MakinaFi

    Attack methodSmart Contract Vulnerability
    Reported loss$ 4,130,000
  4. Incident date
    Target

    Solar

    Attack methodAccount Compromise
    Reported lossNot disclosed
  5. Incident date
    Target

    Scroll

    Attack methodThe X account was hacked
    Reported lossNot disclosed