Hacking News
Aave Depositor Loses $305,000 in Deposit Token
A depositor in the Aave protocol lost about $305,000 in a deposit token during a November 10 attack on the Across Protocol's website. The attacker used a fake spending permission to transfer the depositor's tokens from one wallet to another. Bitquery estimates $401,900 in losses, with the largest wallet containing 148.60 aWETH, an interest-bearing token representing an Aave deposit. The attack was carried out through social engineering involving the website's registrar, Namecheap.