KyberSwap suffers multichain exploit, resulting in $45m loss


The Kyber Network team has confirmed the incident, urging users to promptly withdraw their funds.

Decentralized exchange protocol KyberSwap has allegedly suffered a hacker attack as more than $45 million worth of crypto has been drained from the project across multiple networks.

The Kyber Network team has confirmed the incident in an X post, advising users to “promptly withdraw their funds.” The team also noted that KyberSwap’s aggregator “is not impacted and is operating fully as normal.”

While the root cause of the attack is yet to be revealed, users suggest that the protocol allegedly suffered an exploit involving its liquidity pools. According to Unibot, a crypto trading bot for Telegram, the issue “does not appear to affect their router contract,” implying the incident should not affect Unibot users’ trades.

Analysts at blockchain firm BlockSec claim the hack was possible due to a “tick manipulation and double liquidity counting.”

“In summary, the attackers borrowed a flash loan and drained the pools with low liquidity. By executing swaps and altering positions, they manipulated the current prices and ticks of the victimized pools.”

Shortly after the attack, the hacker left an on-chain message, saying they will soon start negotiations with the Kyber Network team. Amid the incident, the total value of funds locked in KyberSwap plunged by almost 84% from $84.9 million down to $13.6 million, according to data from DefiLlama.

Security analysts at Lookonchain calculated that the hacker stole over 10,000 in wETH (valued at the moment of the attack at $20.7 million), more than 4,000 in wstETH ($9.5 million) and nearly 4 million in ARB (~$4.1 million) among other tokens across Base, Polygon, Optimism, Arbitrum and other networks.

Users believe the hacker is the same person who attacked Indexed Finance, referring to the same crypto address spotted in the transaction history of KyberSwap’s operations.

Source : by Denis Omelchenko / Nov 23, 2023 logo


240 rue Evariste Galois,

06410 Biot,

Sophia Antipolis

Automata Pay

65-66 Warwick House 4th

Floor, Queen Street, London

England, EC4R 1EB

Automata Pay Europe Ltd

3rd Floor Ormond Building,

31-36 Ormond Quay Upper,

Dublin 7, D07 Ee37

Automata ICO Ltd

Italian Branch

Via Archimede, 161,

00197 Roma


The purchase of digital assets is subject to a high market risk and price volatility. Changes in value can be significant and occur rapidly and without warning. Past performance is not a reliable indicator of future performance. The value of an investment and returns can fluctuate both up and down, and you may not recover the amount you invested. RISK WARNING

Automata ICO Limited has a branch in Italy with its registered office at Via Archimede, 161, Roma, Italy, and registered in Italy under number 96550860587 with the Organismo Agenti e Mediatori (OAM) as a Virtual Asset Service Provider (VASP).

Automata France SAS is a company registered in France with the company number 902 498 617. Automata FRANCE SAS is registered with the french Financial Market Authority, l’Autorité des marchés financiers (“AMF”), as a provider of Virtual Asset Service Provider under number E2023-087.

Automata Pay Europe Limited is a partner of Modulr Finance B.V., a company registered in the Netherlands with company number 81852401, which is authorised and regulated by the Dutch Central Bank (DNB) as an Electronic Money Institution (Firm Reference Number: R182870) for the issuance of electronic money and payment services. Your account and related payment services are provided by Modulr Finance B.V. Your funds will be held in one or more segregated accounts and safeguarded in line with the Financial Supervision Act. How we keep your money safe.