On November 9, 2022, Brahma Finance's TopGear vault on Ethereum was exploited via an arbitrary external call vulnerability in the Zapper contract, where the swapTarget parameter was not validated, allowing an attacker to construct malicious call data and drain 89,343 USDC from three authorized user accounts.