Old Bugs Die Hard: Exploiting the ParaSwap AugustusV6 Vulnerability with a Fake Uniswap V3 Pool

A detailed analysis of a security exploit that drained ~20,000 USDC from a user through a year-old vulnerability in ParaSwap's AugustusV6 router. The attacker created a fake Uniswap V3 pool and exploited insufficient callback verification in the router contract, which allowed unauthorized transfer of tokens from addresses that Show more