Hack history / 2026 / Hack or exploit
Matcha
Hack or exploit on Jan 25, 2026 · Frontend Compromise
SOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$13.4M
dollars at the time
Returned
none listed
as the sources state it
Rank
#251
among thefts by dollars lost
What happened
Matcha Meta users lost $13.43M on January 25, 2026 when the SwapNet aggregator was exploited for arbitrary-call ability. The vulnerability allowed unauthorized access to user-approved tokens across Base and Ethereum. The frontend UI inadequately warned about approval risks.
Details
- Date
- Jan 25, 2026
- Kind
- Hack or exploit
- Method
- Frontend Compromise
- How in
- Keys, accounts and infrastructure
- Target
- DeFi protocol
- Chains
- Base, Ethereum
Related incidents
Cite this page
SwanBluechip, "Matcha hack, Jan 25, 2026: $13.4M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht4cd17e3360/ (data as of 2026-10-31).