DEX aggregator Matcha Meta was a victim of a crypto scam with an estimated loss of around $16.8 million in digital assets. The attacker has allegedly swapped theDEX aggregator Matcha Meta was a victim of a crypto scam with an estimated loss of around $16.8 million in digital assets. The attacker has allegedly swapped the

Crypto Scam: Matcha Meta Suffers $16.8 Million SwapNet Exploit

2026/01/26 18:43
2 min read

The broader cryptocurrency market has experienced another scam, resulting in a loss of $16.8 million.

These funds were withdrawn from Matcha Meta, a decentralized exchange aggregator. Several blockchain security firms, including PerkShield, have flagged the incident.

Matcha Meta Yet to Confirm Crypto Losses

Matcha Meta reported the security incident on Jan. 25, citing that it impacted its SwapNet integration.

Although the aggregator has not made any official statements attesting that users’ funds were lost, some analysts say it was a multi-million dollar drain of user funds.

However, the protocol immediately temporarily disabled SwapNet contracts.

In addition, direct aggregator allowances were removed on Matcha Meta. According to PerkShield, the attacker has swapped about $10.5 million in USDC out of the estimated $16.8 million in assets that were stolen.

The attacker swapped Base for roughly 3,655 Ethereum ETH $2 893 24h volatility: 1.6% Market cap: $349.36 B Vol. 24h: $33.06 B , after which he began bridging the funds to Ethereum.

Blockchain security firm CertiK had initially reported a smaller estimated loss of around $13.3 million in USDC on Base.

In this case, the attack was identified as an “arbitrary call” vulnerability in the SwapNet contract, which gave the attacker the leverage to transfer funds approved to it.

“Users who have disabled One-Time Approval and have set direct allowances on individual aggregator contracts assume the risks of each aggregator,” Matcha Meta wrote in its X post.

South Korea Authorities Fall Victim to Crypto Scam

In related crypto scam news, South Korean prosecutors recently recorded a significant loss in their seized Bitcoin.

The funds were targeted in a phishing attack, resulting in an estimated loss of about 70 billion won, or roughly $48 million.

The loss was discovered by the Gwangju District Prosecutors’ Office during a routine inspection of confiscated crypto assets.

With cybercriminal activity on the rise, crypto firms are collaborating with law enforcement and industry partners to combat scams.

On Jan. 9, stablecoin issuer Tether announced a joint initiative launched with the United Nations Office on Drugs and Crime (UNODC).

This is a measure to counter organized crime, corruption, terrorism, and illicit financial flows through analytic and technical cooperation.

next

The post Crypto Scam: Matcha Meta Suffers $16.8 Million SwapNet Exploit appeared first on Coinspeaker.

Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact [email protected] for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.
Tags:

You May Also Like

Crypto whale loses $6M to sneaky phishing scheme targeting staked Ethereum

Crypto whale loses $6M to sneaky phishing scheme targeting staked Ethereum

The post Crypto whale loses $6M to sneaky phishing scheme targeting staked Ethereum appeared on BitcoinEthereumNews.com. A crypto whale lost more than $6 million in staked Ethereum (stETH) and Aave-wrapped Bitcoin (aEthWBTC) after approving malicious signatures in a phishing scheme on Sept. 18, according to blockchain security firm Scam Sniffer. According to the firm, the attackers disguised their move as a routine wallet confirmation through “Permit” signatures, which tricked the victim into authorizing fund transfers without triggering obvious red flags. Yu Xian, founder of blockchain security company SlowMist, noted that the victim did not recognize the danger because the transaction required no gas fees. He wrote: “From the victim’s perspective, he just clicked a few times to confirm the wallet’s pop-up signature requests, didn’t spend a single penny of gas, and $6.28 million was gone.” How Permit exploits work Permit approvals were originally designed to simplify token transfers. Instead of submitting an on-chain approval and paying fees, a user can sign an off-chain message authorizing a spender. That efficiency, however, has created a new attack surface for malicious players. Once a user signs such a permit, attackers can combine two functions—Permit and TransferFrom—to drain assets directly. Because the authorization takes place off-chain, wallet dashboards show no unusual activity until the funds move. As a result, the assets are gone when the approval executes on-chain, and tokens are redirected to the attacker’s wallet. This loophole has made permit exploits increasingly attractive for malicious actors, who can siphon millions without needing complex hacks or high-cost gas wars. Phishing losses The latest theft highlights a wider trend of escalating phishing campaigns. Scam Sniffer reported that in August alone, attackers stole $12.17 million from more than 15,200 victims. That figure represented a 72% jump in losses compared with July. According to the firm, the most significant share of August’s damages came from three large accounts that accounted for nearly half…
Share
BitcoinEthereumNews2025/09/19 02:31
Why is the Trump-backed WLFI Token Price Up Today?

Why is the Trump-backed WLFI Token Price Up Today?

The post Why is the Trump-backed WLFI Token Price Up Today? appeared first on Coinpedia Fintech News World Liberty Financial’s native token WLFI, backed by the
Share
CoinPedia2026/02/09 18:54
Unlock 24/7 Crypto Blackjack Customer Support Now

Unlock 24/7 Crypto Blackjack Customer Support Now

Cryptsy - Latest Cryptocurrency News and Predictions Cryptsy - Latest Cryptocurrency News and Predictions - Experts in Crypto Casinos Did you know BC.Game supports
Share
Cryptsy2026/02/09 19:33