Refreshed 2h ago· updates every 6h
Matcha (2026) — Crypto Hack
Not RecoveredJan 25, 2026·
BaseEthereum
Amount Stolen
$13.4M
DEX aggregator assets
Recovered
$0
Matcha was exploited via an unlimited approval mechanism for ~$13.4M across Base and Ethereum; recovery status unknown.
Summary
Matcha was exploited via an unlimited approval mechanism for ~$13.4M across Base and Ethereum; recovery status unknown.
How It Was Compromised — Unlimited Approval Exploit via Unlimited approval exploit
Unlimited Approval ExploitUnlimited approval exploit
On January 25, 2026, Matcha was exploited through an unlimited approval mechanism, resulting in approximately $13.4M in losses across Base and Ethereum. The recovery status of the stolen funds remains unknown.
Fund Flow & Laundering Analysis
No laundering activity observed. Recovery status unknown.
Related Incidents
THORChain
THORChain (2026) — Protocol Exploit on Bitcoin, Ethereum, BNB Chain, Base
$10.8M
2026·Not Recovered
THORChain
THORChain (2026) — TSS Vulnerability on Bitcoin, Ethereum, Base, BSC
$10.7M
2026·Resolved
THORChain
THORChain (2026) — Private Key Compromise on Ethereum, Bitcoin, BNB Chain, Dogecoin, Litecoin, Avalanche, Bitcoin Cash, Base, XRP, TRON
$10.7M
2026·Partially Recovered
Wasabi Protocol
Wasabi Protocol (2026) — Compromised Deployer Key on Ethereum, Base, Blast, Berachain
$5.7M
2026·Not Recovered
Fluid Lending
Fluid Lending (2026) — Private Key Compromise on Ethereum, Base, Arbitrum
$215K
2026·Funds Laundered
Balancer V2
Balancer V2 (2025) — Overflow/Rounding Vulnerability on Ethereum, Arbitrum, Base, Optimism, Polygon
$121.1M
2025·Partially Recovered