SlowMist Cosine: Ekubo contract exploited maliciously, a user has lost 17 WBTC
According to Odaily, SlowMist founder Cosine posted on X, stating, “The Ekubo-related contract was maliciously exploited. The reason is that if users had previously authorized the relevant token to: 0x8CCB1ffD5C2aa6Bd926473425Dea4c8c15DE60fd;
For example, user 0x765DEC’s unlimited WBTC approval (158 days ago): the attacker could designate an already authorized user as the payer and, in payCallback, use the contract to call WBTC transferFrom(victim, Ekubo Core, amount), then transfer the assets to the attacker through Ekubo Core (0xe0e0e08A6A4b9Dc7bD67BCB7aadE5cF48157d444) via the withdraw/pay clearing process. This operation was executed 85 times, each transferring 0.2 WBTC, resulting in a total loss of 17 WBTC for user 0x765DEC. It is recommended that users immediately install the official reminder and check token approvals for the following contracts: 0x8ccb1ffd5c2aa6bd926473425dea4c8c15de60fd (V2)
0x4f168f17923435c999f5c8565acab52c2218edf2 (V3)
Arbitrum: 0xc93c4ad185ca48d66fefe80f906a67ef859fc47d (V3).”
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Tiger Global reduced holdings in tech giants in Q2 and bet on “new stars”: built positions in Cerebras (CBRS.US), AMD (AMD.US), SpaceX (SPCX.US), increased holdings in Intel (INTC.US), and exited Netflix (NFLX.US).
According to disclosures by the U.S. Securities and Exchange Commission (SEC), Tiger Global has submitted its 13F report on holdings for the second quarter ending June 30, 2026.

Sequoia Logistica authorizes release of Q2 2026 interim financial statements
ethena transferred 81.97 million USDC from a certain exchange wallet to FalconX
