DexibleApp aggregator hacked for $2M via 'selfSwap' function
full version at cointelegraph
The buggy function was intended to allow users to provide their own routing information, but the code did not limit routers to a pre-approved list.
The buggy function was intended to allow users to provide their own routing information, but the code did not limit routers to a pre-approved list.
