Morning Edition · Tuesday, June 23, 2026Published at 6:27 AM EDT · New York

Security Roundup: Reproductions of the SquidRouterModule Drain Headline a Run of DeFi Incidents

An access-control flaw in a third-party Safe module, a forced-swap drain and an overnight vault redemption scare illustrate the recurring attack surface in decentralized finance.

Security researchers at DeFiHackLabs published reproductions of several recent exploits, led by the SquidRouterModule incident from May. The attacker abused the module's Axelar express entry point, which accepted attacker-supplied payload d…