Hack history / 2026 / Hack or exploit
ether.fi Liquid
Hack or exploit on Sep 11, 2026 · Arbitrary External Call
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$43K
sources: $38K to $43K
Returned
none listed
as the sources state it
Rank
#1,959
among thefts by dollars lost
What happened
Veda’s AtomicQueue allowed the caller of solve() to supply an arbitrary solver address without authenticating that the address had consented to participate as the solver. The settlement logic then executed want.safeTransferFrom(solver, user, amount). The attacker created a worthless token, submitted a self-request offering that token in exchange for liquidETH, and supplied existing liquidETH holders as the solver. Because those holders had previously approved AtomicQueue, the contract used their allowances to pull liquidETH directly from their wallets and transfer it to the attacker’s request. Eleven users were drained in a single transaction
Details
- Date
- Sep 11, 2026
- Kind
- Hack or exploit
- Method
- Arbitrary External Call
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Related incidents
Liquid Network 2026 · Hack or exploit · $320M
Yearn Ether 2025 · Hack or exploit · $9M
ether.fi 2025 · Fraud · undisclosed
"On-chain Microstrategy" clone Ether Strategy loses over $500,000 of ETH 2025 · Costly mistake or other · $536K
ether.fi 2024 · Hack or exploit · undisclosed
Yearn Ether 2025 · Hack or exploit · $9M
ether.fi 2025 · Fraud · undisclosed
"On-chain Microstrategy" clone Ether Strategy loses over $500,000 of ETH 2025 · Costly mistake or other · $536K
ether.fi 2024 · Hack or exploit · undisclosed
Cite this page
SwanBluechip, "ether.fi Liquid hack, Sep 11, 2026: $43K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htf2f34182df/ (data as of 2026-10-31).