Kinto

Contract Vulnerability

Estimated loss

$1.55M

VERDICT —UNRATED

Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.

▰ METHOD

TOKEN SUPPLY

TOKEN-SUPPLYBYTECODE CATCHABLE →AI SCANNABLE →

Root cause

Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.

Forensic narrative

Ramon Recuero, co-founder of Kinto, a modular exchange platform in the Arbitrum ecosystem, tweeted about the recent attack, stating that the hacker exploited a vulnerability on Arbitrum that allowed unlimited minting of K tokens. The attacker minted 110,000 K and launched an attack targeting the Morpho Vault and a Uniswap v4 pool. The incident resulted in approximately $1.55 million in losses (ETH and USDC) and caused significant volatility in the price of the K token. Attack method (per SlowMist): Contract Vulnerability. Reported loss: $ 1,550,000.

Primary source

https://x.com/ramonrecuero/status/1943426114468352006 ↗

Sourced from

slowmist

Technical record