Introduction On Sunday, Matcha Meta disclosed that a security breach linked to one of its main liquidity providers, SwapNet, compromised users who had granted approvals to SwapNet’s router contract. The incident underscores how permissioned components within decentralized exchange ecosystems can become attack vectors even when the core infrastructure remains intact. Early public assessments place the losses in the range of roughly $13 million to $17 million, with the on-chain activity centering on the Base network and cross-chain movements toward Ethereum. The disclosure prompted prompts for users to revoke approvals and heightened scrutiny of how smart contracts exposed to external routers are safeguarded. Key Takeaways The breach originated through SwapNet’s router contract, prompting an urgent call for users to revoke approvals to prevent further losses. Estimates of the stolen funds vary: CertiK reported about $13.3 million, while PeckShield tallies at least $16.8 million on the Ba...