An exploit targeted a third-party Gnosis Safe module called SquidRouterModule, not Squid’s core cross chain routing contracts. 86 wallets were drained of around $3 million in under two hours. The vulnerability was due to a fixed string check that allowed attackers to siphon funds. Squid’s main router and user funds were unaffected.

Leave a Reply