Digital Asset
Intelligence
Security Incident

Kame Aggregator Contract Vulnerability: $1.32M Reported Loss

·Historical incident record

Incident Overview

Kame Aggregator suffered an exploit due to a design flaw in the swap() function, which allowed arbitrary executor calls. This vulnerability enabled attackers to transfer tokens authorized to the AggregationRouter by users, particularly those with unlimited or oversized approvals. The total value of affected assets was approximately $1.32 million, of which around $946,000 was recovered by the Kame team from the primary exploiter, and about $22,000 was recovered by white-hat hackers.

Sources & References

Original incident referencehttps://kameagg.substack.com/p/post-mortem-kame-aggregator-exploit (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Yala

    Attack methodSecurity Vulnerability
    Reported loss$ 7,640,000
  2. Incident date
    Attack methodFlash Loan Attack
    Reported loss$ 2,400,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed