Incident Overview
On January 25, 2026, Aperture Finance V3/V4 contracts suffered a $3.67M exploit across 11 chains when attackers exploited an arbitrary call vulnerability in non-open-source contracts, allowing them to abuse existing token approvals and drain user assets. The attacker laundered $2.4M through Tornado Cash as part of a coordinated attack that also targeted SwapNet.
The vulnerability existed in Aperture's V3/V4 contracts that exposed an arbitrary call capability, allowing attackers to leverage existing ERC-20 and ERC-721 (liquidity position) approvals that users had granted to the platform. By exploiting this flaw, the attacker executed unauthorized transferFrom operations to drain assets from wallets across multiple chains. The attack affected contracts on Ethereum, Unichain, Arbitrum, Polygon, Optimism, BNB Chain, Base, Avalanche-C, Manta Pacific, and Scroll.
Aperture responded by immediately halting core frontend features to prevent new approvals and urged all users to revoke existing approvals to affected contract addresses. BlockSec Phalcon linked this incident to a broader coordinated attack pattern affecting both Aperture Finance and SwapNet simultaneously, with the exploiter laundering a significant portion of stolen funds through Tornado Cash.
Incident Report
Protocol Information
Market Context at Time of Hack
What the Attacker Needed to Succeed
Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.
What Auditors Should Check
If you're auditing a protocol with similar architecture to Aperture Finance, these are the critical security checks that could have prevented this incident (January 2026).
- Verify all logic paths related to Other are guarded by proper access controls and input validation
- Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs
Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.
Free TrialSources & References
Learn to Prevent the Next Aperture Finance
The Aperture Finance hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.