🚨 theinternettoken.com - Loss ~764M INT + 5.85 WETH (2026-09-21)

Token: $INT @ $0.000328
Network: Base

Type: Access Control / Logic Error (arbitrary mint via unvalidated pool callback)

The INT LiquidityUnifier (0x837dbabc…2032), which holds the reward token's MINTER_ROLE, exposes swapV3(token, pool) that accepts an attacker-supplied pool. Validation only checks the pool has code and that its token0()/token1() equal INT. The attacker deployed a fake "pool" returning INT for both tokens; swapV3 calls pool.swap(), which re-enters uniswapV3SwapCallback and mints an attacker-chosen amount to currentPoolV3. Using a Convertor round-trip to defeat the validateSupply check, the attacker freely minted ~925M INT, dumped part into the real INT/WETH Uniswap V3 pool for 5.85 WETH and walked away with ~764M INT + 5.85 WETH.

TX: https://basescan.org/tx/0xed62bb27bd1058d3d7cc93d55421d6d0001ced8cb4529b02773f5126a4edb08b
Attacker: https://basescan.org/address/0x5f7ce6395818857ac20730dc990f614356d1ec68
Victim: https://basescan.org/address/0x837dbabc4f5fa78baf177597edbda09645822032
X: https://x.com/internet_token

@defimon_subscription_bot