Matcha Hack 2026 — $13M Exploit Analysis

Matcha was exploited via an unlimited approval mechanism for ~$13.4M across Base and Ethereum; recovery status unknown.

Details

• Date: 2026-01-25
• Amount Lost: $13,400,000
• Chain(s): Base, Ethereum
• Category: Unlimited Approval Exploit
• Technique: Unlimited approval exploit
• Status: Not Recovered
• Amount Recovered: None reported

Full Description

On January 25, 2026, Matcha was exploited through an unlimited approval mechanism, resulting in approximately $13.4M in losses across Base and Ethereum. The recovery status of the stolen funds remains unknown.

Laundering Analysis

No laundering activity observed. Recovery status unknown.

Sources

• https://www.certik.com/
• https://www.trmlabs.com/

Transaction Hashes

• N/A

Back to Browse