Exploitation of Argent-style Smart Wallet Leads to $59,800 Loss
An attacker exploited vulnerabilities in an Argent-style smart wallet system, resulting in a loss of approximately $59,800. The attack involved flaws in the recovery and execution modules of the wallet.
The incident involved an Argent-style smart wallet system where an attacker exploited two significant flaws. The first flaw was in the recovery module, which had an unrestricted setter that allowed the attacker to manipulate the recovery period, wrapping the deadline timestamp into the past. This enabled the attacker to perform same-transaction recovery and change ownership using a valid guardian signature. The second flaw was in the execution module, which failed to reject the reuse of identical signed payloads, allowing the attacker to execute the same transaction multiple times.
The attacker took advantage of these vulnerabilities by executing the same transaction 19 times in one instance and 9 times in another, trading against a low-liquidity MARK/WETH pool. This manipulation led to a financial loss estimated at approximately $59,800. The specific blockchain used in this incident was not stated, which limits the ability to trace the transactions on-chain.
The on-chain record does not provide specific addresses involved in the incident, as the chain was not disclosed. However, the nature of the attack highlights the critical importance of robust security measures in smart wallet systems to prevent similar exploits.