[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

![guardrailai Avatar](https://lunarcrush.com/gi/w:24/cr:twitter::1641820305923481603.png) Guardrail • Real-Time Web3 Security [@guardrailai](/creator/twitter/guardrailai) on x XXX followers
Created: 2025-07-25 16:20:49 UTC

The root issue was in SwapLogic._swapViaRouter():

The assumption: router would always be a legitimate DEX (Uniswap, 1inch)

The reality: the attacker registered their own contract as both the router AND the whitelisted Arcadia account.

![](https://pbs.twimg.com/media/Gwt03XIWAAAxkIm.jpg)

XX engagements

![Engagements Line Chart](https://lunarcrush.com/gi/w:600/p:tweet::1948780487230566919/c:line.svg)

**Related Topics**
[1inch](/topic/1inch)
[uniswap](/topic/uniswap)
[web3](/topic/web3)
[realtime](/topic/realtime)

[Post Link](https://x.com/guardrailai/status/1948780487230566919)