Ekubo DEX Warns of Security Flaw in EVM Transaction Routing Contract

Ekubo, a DEX protocol in the Starknet ecosystem, has issued a security alert over a vulnerability found in its transaction routing contract on the EVM chain, according to BlockBeats on May 6. The team said liquidity providers and users on Starknet are not affected, and the full scope of the incident is still being assessed. Users are urged to revoke approvals granted to the impacted contract immediately. SlowMist founder Yu Xian said the attacker abused the payCallback mechanism to set previously authorized users' wallets—specifically those that had granted unlimited token approvals—as payers, then called WBTC’s transferFrom to move funds from victims. The exploit was executed 85 times, transferring 0.2 WBTC per transaction. One address, 0x765DEC, reportedly suffered total losses of 17 WBTC.