chrizy.eth
20.3K posts


This incident is unrelated to Squid’s core protocol and contracts. All Squid users and integrators are unaffected and no action is needed. A third-party Gnosis Safe module was exploited today across Base and Ethereum, resulting in approximately $3.2M in losses. The vulnerable contract is verified on Basescan under the name “SquidRouterModule” but this contract was not built, deployed, or operated by Squid. It is a third-party smart-wallet product that chose to integrate with Squid, among other protocols, but has not been in contact with us. The exploit worked because the third-party module accepted a caller-supplied constant string as proof that a message was secure. If you pass in this string (which is publicly available in the verified contract’s code), then you can execute an array of arbitrary calldata, stealing funds at will. The victims’ Safes had added this faulty contract as a trusted Safe Module, which gives the contract the ability to spend any tokens in the Safe without signatures. Squid’s own router (0xce16F69375520ab01377ce7B88f5BA8C48F8D666) is architecturally different and was not touched. Squid user funds, approvals, and integrations are fully secure. Early public reporting may reference “SquidRouter” due to the contract’s verified name on Basescan. The accurate framing is: a third-party SquidRouterModule was exploited, not Squid’s Router contract. The contract shares our name but is not our code. We are monitoring the situation and will share updates if anything changes materially.

🚨 Blockaid detected an ongoing exploit targeting the SquidRouterModule on Ethereum and Base. 86 Gnosis Safes drained for ~$3M in ~2 hours. All stolen tokens swapped to DAI via attacker-controlled Uniswap V3 pools. More details in 🧵

Mamo just turned 1. 🎂 To celebrate, we're giving away 1,000,000 MAMO! Thanks to everyone that continues to grow with us.




Most AI agents ask you to trust them with your money. Mamo doesn't. Your funds stay in a vault only you control. Add, pause, or withdraw whenever you want. 🔐 The full case for why this matters from @0xpili_:

Base is actively testing $BASE token Found on @Base official Github The very first line of the code states: "Benchmarks for Base native token and token factory precompile logic" Usually the tokens comes closer after this. Seems like we are closer to getting rich.



It’s going to be an $ETH bull summer I can feel it coming Sending a wholehearted thank you to everyone who capitulated. We’re much better off without you The incoming God candles will be soo much more satisfying knowing you are all sidelined Inconceivably HIGHER








