On May 28, 2025, Cork Protocol suffered a $12 million exploit when an attacker created fraudulent market structures with an unprotected beforeSwap hook lacking authorization checks. Missing input validation on market configuration and token validation logic allowed the attacker to create fake token derivatives, draining 3,761 wstETH.