A router on BNB Chain was exploited through an insecure uniswapV3SwapCallback, resulting in a reported loss of approximately 62.28 BNB and exposing a broader risk for users who had previously granted the router ERC-20 approvals.

The disclosed issue centers on how the router handled the Uniswap V3-style callback during swaps. According to the incident description, the contract did not verify whether the caller was a trusted factory or token pair, or a legitimate V3 liquidity pool. It also failed to bind the payer in the callback to the original swap context.

That design allowed an attacker to inject a victim address as the payer and rely on token approvals that had already been granted to the router. In practice, the exploit used those existing permissions to transfer assets without requiring the victim to sign a second transaction.

The reported direct loss was approximately 62.28 BNB. The available information did not identify the router by name, specify how many wallets may be exposed, or say whether the vulnerable path has been patched or disabled. No further details were provided on asset recovery, affected tokens, or whether additional losses have been detected.

The incident highlights a recurring risk in DeFi router design: approvals can become an attack surface when callback logic and caller validation are not tightly constrained. In this case, the technical flaw appears less about a user mistake and more about how delegated token access interacted with weak verification inside the contract flow.

Why It Matters

Even though the reported loss was relatively small, the event matters because router approvals can create latent exposure across a wider set of users than the first theft suggests. If a vulnerable contract retains spending permissions from past interactions, the impact of a single exploit can persist until users revoke access or the contract is effectively neutralized.

For the broader DeFi market, the case is a reminder that security risk does not sit only in pools or token contracts. Routing infrastructure and callback handling are also critical parts of market structure, especially on chains where users routinely grant broad allowances to streamline trading.