Morning Edition · Sunday, September 13, 2026Published at 1:57 AM EDT · New York

A Deprecated ether.fi Contract Drained Eleven Wallets Through a Missing Caller Check

The loss was about 15.45 ether, roughly $38,000, and researchers published a working proof of concept a day later as the year's exploit total passed $1.3 billion.

Researchers at DeFiHackLabs published a proof of concept for the ether.fi AtomicQueue exploit, a small loss with an instructive cause. The contract's solve function accepted a solver address from the caller without checking that it matched…