# A Deprecated ether.fi Contract Drained Eleven Wallets Through a Missing Caller Check

The loss was about 15.45 ether, roughly $38,000, and researchers published a working proof of concept a day later as the year's exploit total passed $1.3 billion.

- Published: 2026-09-13T05:57:01.509Z
- Canonical: https://polylog.news/crypto/2026-09-13/a-deprecated-ether-fi-contract-drained-eleven-wallets-throug
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [DeFiHackLabs (ether.fi PoC)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/1320b91f8817e9195562f8f235328a2e33cc3a8a), [DeFiHackLabs (OMNI404 PoC)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/9ea702acb758624b4af62fe33ee2a814a28cec61), [DeFiHackLabs (Unifi PoC)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/ed55bc5b97fe7b3d53e7cf5f8d22dc7b86a019a5), [Rekt News](https://www.rekt.news/), [crypto.news](https://crypto.news/defi-hacks-2026-billion-lost-same-attack-keeps-working/)

Researchers at DeFiHackLabs published a proof of concept for the ether.fi AtomicQueue exploit, a small loss with an instructive cause. The contract's solve function accepted a solver address from the caller without checking that it matched…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-09-13/a-deprecated-ether-fi-contract-drained-eleven-wallets-throug (subscription information: https://polylog.news/pricing).