UNKNOWN

DESCRIPTION OF EVENTS

The victim wallet appears to be at address 0xddddf3d84a1e94036138cab7ff35d003c1207a77. This was originally funded on March 22nd, 2025.

Unfortunately, there was a vulnerability where the uniswapV3SwapCallback function lacked proper access control.

Losses have been attributed to a lack of access control on the uniswapV3SwapCallback() function. The victim contract "was therefore easily exploited".

TenArmor has provided a loss total of $62.3k USD.

Very few details are known about this smart contract, transaction, or who created it. Only TenArmor has posted details of this transaction.

There does not appear to have been any sort of investigation or potential recovery launched.

It is unclear if there has been any recovery in this case.

This incident is likely a permanent loss.

Explore This Case Further On Our Wiki

A base blockchain wallet was exploited due to a vulnerability in its smart contract, specifically a lack of access control on the uniswapV3SwapCallback() function. This flaw allowed attackers to easily exploit the contract, resulting in an estimated loss of $62.3k USD, as reported by TenArmor. Little is known about the contract’s origin or creator, and no investigation or recovery effort has been identified, making the loss likely permanent.

TenArmor - "Our system has detected a suspicious attack involving an unverified contract on #BASE, resulting in an approximately loss of $62.3K." - Twitter/X (Aug 7)
Attack Transaction - BaseScan (Aug 7)
Malicious Smart Contract In Attack - BaseScan (Aug 7)
Creation Of Attack Contract - BaseScan (Aug 7)
Source Of Funds And Suspected Victim Wallet - BaseScan (Aug 7)
Victim Address Initially Funded With 0.0005 ETH From ByBit - BaseScan (Aug 7)

More case studies

Morpho Labs Bundler3
Misconfiguration Drains User Wallet

Sola Unverified Contract
withdrawToken Lacking Access Control