Hack history / 2026 / Hack or exploit
SquidRouterModule
Hack or exploit on May 4, 2026 · Improper Access Control
ONE SOURCE · 1 SOURCE
Lost
$3.2M
dollars at the time
Returned
none listed
as the sources state it
Rank
#576
among thefts by dollars lost
What happened
SquidRouterModule, a third-party Gnosis Safe module for Squid Router, was exploited via a verification error in executeSameChainActions(). The function accepted a publicly available constant string as proof of message security. An attacker with this fixed string could impersonate Safe wallet owners and execute arbitrary calldata to drain 86 Gnosis Safe vaults over two hours, consolidating ~$3.2M worth into DAI.
Details
- Date
- May 4, 2026
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum, Base
Reported by
Related incidents
Third-party Gnosis Safe Module (SquidRouterModule) 2026 · Hack or exploit · $3.2M
SUPERFORTUNE AI 2026 · Hack or exploit · $15.2M
Crypto DAO 2026 · Hack or exploit · $8.2M
Coinsbuy 2026 · Hack or exploit · $7.9M
New Market Trading 2026 · Hack or exploit · $4M
SUPERFORTUNE AI 2026 · Hack or exploit · $15.2M
Crypto DAO 2026 · Hack or exploit · $8.2M
Coinsbuy 2026 · Hack or exploit · $7.9M
New Market Trading 2026 · Hack or exploit · $4M
Cite this page
SwanBluechip, "SquidRouterModule hack, May 4, 2026: $3.2M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/hte905860f52/ (data as of 2026-10-31).