An attacker exploited dTrinity’s dLEND swap adapter contracts on the Sonic and Fraxtal networks, impacting users who had previously granted token approvals to these adapter contracts. dTrinity confirmed the incident on X, urged users to revoke approvals to the affected adapter contracts on both chains, and subsequently published a post‑mortem describing the issue as an exploit of their swap adapter used by the dLEND lending product. According to the post‑mortem, the affected components were swap adapter contracts integrated with dLEND, dTrinity’s Aave v3‑based money market that uses the protocol’s stablecoin dUSD as a core liquidity layer. dTrinity operates as a stablecoin liquidity protocol that launched on Fraxtal, an Ethereum Layer 2 backed by the Frax ecosystem, and later expanded to other networks including Sonic. The exploit specifically targeted users who had granted spending approvals to these adapter contracts, meaning the attacker could move approved assets even if users did not actively initiate new transactions at the time of the attack. This incident follows earlier security issues faced by dTrinity, including a separate exploit in 2025 on Ethereum that drained roughly $257k from the dLEND‑dUSD pool via an accounting/index‑sync bug, underscoring ongoing security challenges around lending logic and auxiliary contracts such as adapters. The latest Sonic/Fraxtal adapter exploit is significant because it highlights how peripheral DeFi components (adapters, routers, helpers) can become attack surfaces across multiple chains, and why users are regularly advised to review and revoke token approvals to third‑party contracts after security incidents while teams audit, patch, and redeploy secure versions.

AI-generated background, compiled from web sources — not editorial content.

More coverage

Explore the topic

Loading related coverage…

Explore the full feed

Comments

Loading comments…