Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/unknowncontractuniswapv3swapcallbacklacksaccesscontrol.php}} {{Unattributed Sources}} Base Blockchain Logo/HomepageA base blockchain wallet was exploited due to a vulnerability in its smart contract, specifically a lack of access control on the uniswapV3SwapCallback() function. This flaw allowed attackers to easily exploit the contract, resulting in an..."

2025-08-27T21:36:04Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/unknowncontractuniswapv3swapcallbacklacksaccesscontrol.php}} {{Unattributed Sources}} thumb|Base Blockchain Logo/HomepageA base blockchain wallet was exploited due to a vulnerability in its smart contract, specifically a lack of access control on the uniswapV3SwapCallback() function. This flaw allowed attackers to easily exploit the contract, resulting in an..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/unknowncontractuniswapv3swapcallbacklacksaccesscontrol.php}}
{{Unattributed Sources}}

[[File:Baseblockchain.jpg|thumb|Base Blockchain Logo/Homepage]]A base blockchain wallet was exploited due to a vulnerability in its smart contract, specifically a lack of access control on the uniswapV3SwapCallback() function. This flaw allowed attackers to easily exploit the contract, resulting in an estimated loss of $62.3k USD, as reported by TenArmor. Little is known about the contract’s origin or creator, and no investigation or recovery effort has been identified, making the loss likely permanent.<ref name="tenarmortweet-20952" /><ref name="attacktransaction-20953" /><ref name="attackcontract-20954" /><ref name="creationtransaction-20955" /><ref name="victimaddress-20956" /><ref name="victimaddressfunding-20957" />

== About Unverified Contract ==
The victim wallet appears to be at address 0xddddf3d84a1e94036138cab7ff35d003c1207a77. This was originally funded on March 22nd, 2025.

== The Reality ==
Unfortunately, there was a vulnerability where the uniswapV3SwapCallback function lacked proper access control.

== What Happened ==
A smart contract at a base wallet was exploited in April 2025 due to missing access controls on the uniswapV3SwapCallback() function, resulting in a likely permanent loss of $62.3k USD.
{| class="wikitable"
|+Key Event Timeline - Unknown Contract uniswapV3SwapCallback Lacks Access Control
!Date
!Event
!Description
|-
|March 22nd, 2025 11:49:57 AM MDT
|Victim Wallet Created
|The first funding of the victim wallet on Ethereum.
|-
|April 11th, 2025 5:38:47 AM MDT
|Attack On Base Blockchain
|The attack transaction is accepted by miners on the Base blockchain.
|-
|April 11th, 2025 5:53:00 AM MDT
|Attack Reported By TenArmor
|The attack is reported by TenArmor in a new public tweet.
|}

== Technical Details ==
Losses have been attributed to a lack of access control on the uniswapV3SwapCallback() function. The victim contract "was therefore easily exploited".

== Total Amount Lost ==
TenArmor has provided a loss total of $62.3k USD.

The total amount lost has been estimated at $62,000 USD.

== Immediate Reactions ==
Very few details are known about this smart contract, transaction, or who created it. Only TenArmor has posted details of this transaction.

== Ultimate Outcome ==
There does not appear to have been any sort of investigation or potential recovery launched.

== Total Amount Recovered ==
It is unclear if there has been any recovery in this case.

There do not appear to have been any funds recovered in this case.

== Ongoing Developments ==
This incident is likely a permanent loss.
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="tenarmortweet-20952">[https://twitter.com/TenArmorAlert/status/1910662533607796887 TenArmor - "Our system has detected a suspicious attack involving an unverified contract on #BASE, resulting in an approximately loss of $62.3K." - Twitter/X] (Accessed Aug 7, 2025)</ref>

<ref name="attacktransaction-20953">[https://basescan.org/tx/0x1a6002d8aee205dff67cb2cdaf60569721655857d49ffe2ce81e10fde8c45946 Attack Transaction - BaseScan] (Accessed Aug 7, 2025)</ref>

<ref name="attackcontract-20954">[https://basescan.org/address/0x780e5cb8de79846f35541b700637057c9ddded68 Malicious Smart Contract In Attack - BaseScan] (Accessed Aug 7, 2025)</ref>

<ref name="creationtransaction-20955">[https://basescan.org/tx/0x303460cf5f4c9847d6fc0314f15419082129ead5d367247003dda072d7556791 Creation Of Attack Contract - BaseScan] (Accessed Aug 7, 2025)</ref>

<ref name="victimaddress-20956">[https://basescan.org/address/0xddddf3d84a1e94036138cab7ff35d003c1207a77 Source Of Funds And Suspected Victim Wallet - BaseScan] (Accessed Aug 7, 2025)</ref>

<ref name="victimaddressfunding-20957">[https://basescan.org/tx/0xd0cfe6513fb9fd93de6dfb1fda17b6c5c6d6ec24967e98eab08abc81dd293b8b Victim Address Initially Funded With 0.0005 ETH From ByBit - BaseScan] (Accessed Aug 7, 2025)</ref></references>

Unknown Contract uniswapV3SwapCallback Lacks Access Control - Revision history