⚡Aperture Finance Exploit: Traced On-chain

Two protocols were compromised through unlimited token approvals. Only Aperture Finance publicly acknowledged the issue and initiated on-chain communication with the attacker.

❗On-chain tracing shows ~$13M in stolen assets. About $3M in USDC remains untouched, while other assets were swapped into ETH — with ~540 ETH still sitting at the original address.

Funds followed a standard cross-chain laundering path via Relay and Superbridge. We completed full cross-chain tracing, including post-bridge dispersion on Ethereum. These wallets are currently dormant.

👉A second exploiter was identified. One address — originally funded via Tornado Cash, using the same infinite-approval vulnerability hours after the initial exploit.

Most funds remain traceable and inactive.