Matcha Meta Suffers $16.8M Breach Linked To SwapNet, Users Urged To Revoke Token Approvals
Real-time blockchain safety monitoring service PeckShieldAlert has disclosed that the decentralized alternate (DEX) aggregator Matcha Meta was affected by a safety incident linked to SwapNet, an exterior routing service built-in into its buying and selling infrastructure.
The alert indicated that customers who had chosen to disable 0x’s “One-Time Approvals” characteristic had been significantly uncovered to threat on account of the best way token permissions had been configured.
PeckShieldAlert reported that roughly $16.8 million value of digital belongings had been faraway from affected wallets. On the Base community, the attacker transformed roughly 10.5 million USDC into about 3,655 ETH and subsequently started transferring the funds towards the Ethereum mainnet via cross-chain bridging mechanisms, a step generally used to complicate transaction tracing.
In response to the unfolding state of affairs, customers had been suggested to revoke all token approvals beforehand granted to particular person aggregator contracts that function exterior of 0x’s One-Time Approval framework. The warning emphasised that lingering approvals might proceed to permit unauthorized asset actions even after the fast vulnerability had been addressed.
Matcha Meta additionally acknowledged the incident publicly. In an announcement revealed on the social media platform X, the workforce confirmed that it was in direct communication with the SwapInternet builders and that SwapInternet’s contracts had been briefly disabled as a precautionary measure. Matcha Meta added that an inner investigation was underway and that additional updates could be shared as further particulars turned obtainable.
After reviewing with 0x’s protocol workforce, we’ve got confirmed that the character of the incident was not related to 0x’s AllowanceHolder or Settler contracts.
Users who’ve interacted with Matcha Meta through One-Time Approval are thus protected.
Users who’ve disabled One-Time… https://t.co/VQVmj4LL0F
— Matcha Meta
(@matchametaxyz) January 25, 2026
The platform recognized SwapInternet’s router contract at handle 0x616000e384Ef1C2B52f5f3A88D57a3B64F23757e as essentially the most crucial approval for customers to revoke. It cautioned that failing to take away this authorization might go away wallets weak to additional unauthorized transactions even after the exploit itself had been contained.
As a precaution, we suggest revoking all approvals to particular person aggregators exterior of 0x’s One-Time Approval contracts.
Most well timed is SwapInternet’s router contract at 0x616000e384Ef1C2B52f5f3A88D57a3B64F23757e https://t.co/NpwRWtVwzb
— Matcha Meta
SwapInternet is a DEX aggregator designed to optimize token swaps by routing trades throughout a number of on-chain liquidity venues, together with automated market makers {and professional} market makers. Matcha Meta incorporates SwapInternet as one among a number of underlying liquidity and routing choices, directing sure trades via its infrastructure to supply aggressive swap charges.
Matcha Meta Enhances DeFi Trading With Multi-Chain Liquidity Aggregation, Gas Optimization, And MEV Protection
The DEX is designed to offer customers with optimum pricing for decentralized finance (DeFi) transactions by leveraging each on-chain and off-chain liquidity sources. Using the 0x Swap API, the platform scans a couple of hundred venues, together with automated market makers and 0x’s proprietary request-for-quote system, to determine the best-executed costs. This methodology goals to enhance value effectivity and scale back gasoline prices, providing a cheap different to buying and selling straight on platforms resembling Uniswap or SushiSwap.
The platform helps buying and selling throughout 9 blockchain networks, together with Ethereum, BNB Smart Chain, Polygon, Avalanche, Optimism, Fantom, Celo, Arbitrum, and Base, enabling customers to entry liquidity throughout a number of ecosystems.
Matcha Meta indexes over 4.7 million tokens from greater than 100 DEX liquidity sources, permitting it to mixture liquidity and supply extra aggressive commerce pricing. Gas charges are included straight into trades to cowl potential re-submission prices, eradicating the necessity for customers to carry native tokens for transaction charges.
Additionally, the platform integrates MEV safety via the 0x Swap APIs, serving to customers keep away from slippage and front-running assaults. On Ethereum and Polygon, trades routed through Matcha Auto or manually via the RFQ system additionally profit from safeguards in opposition to MEV exploits.
The put up Matcha Meta Suffers $16.8M Breach Linked To SwapNet, Users Urged To Revoke Token Approvals appeared first on Metaverse Post.
