On March 30, 2025, SIR.trading on Ethereum was exploited for $355K via callback validation flaw. Vault contract's callback did not validate Uniswap pool address, allowing replacement with attacker-controlled address via transient storage manipulation (one of first Dencun-targeted exploits).