Refreshed 1h ago· updates every 6h
Matcha (2026) — Crypto Hack
Not RecoveredJan 25, 2026·
BaseEthereum
Amount Stolen
$13.4M
DEX aggregator assets
Recovered
$0
Matcha was exploited via an unlimited approval mechanism for ~$13.4M across Base and Ethereum; recovery status unknown.
Summary
Matcha was exploited via an unlimited approval mechanism for ~$13.4M across Base and Ethereum; recovery status unknown.
How It Was Compromised — Unlimited Approval Exploit via Unlimited approval exploit
Unlimited Approval ExploitUnlimited approval exploit
On January 25, 2026, Matcha was exploited through an unlimited approval mechanism, resulting in approximately $13.4M in losses across Base and Ethereum. The recovery status of the stolen funds remains unknown.
Fund Flow & Laundering Analysis
No laundering activity observed. Recovery status unknown.
Related Incidents
THORChain
THORChain (2026) — Protocol Exploit on Bitcoin, Ethereum, BNB Chain, Base
$10.8M
2026·Not Recovered
THORChain
THORChain (2026) — TSS Vulnerability on Bitcoin, Ethereum, Base, BSC
$10.7M
2026·Resolved
THORChain
THORChain (2026) — Private Key Compromise on Ethereum, Bitcoin, BNB Chain, Dogecoin, Litecoin, Avalanche, Bitcoin Cash, Base, XRP, TRON
$10.7M
2026·Partially Recovered
Moonwell (MAMO)
Moonwell (MAMO) (2026) — DeFi on Base, Ethereum
$8.7M
2026·Not Recovered
Wasabi Protocol
Wasabi Protocol (2026) — Compromised Deployer Key on Ethereum, Base, Blast, Berachain
$5.7M
2026·Not Recovered
The Sandbox Bridge
The Sandbox Bridge (2026) — Bridge on Base, BNB Chain, Ethereum
$987K
2026·Partially Recovered