The dTRINITY swap adapter suffered a missing authorization check in its swapLiquidity() function. The attacker called the swap function using addresses of victims who had previously approved the adapter during testing. Malicious swap routes sent collateral deposits directly to attacker-controlled addresses while returning minimal amounts to pass validation, draining $56K.

The DeFi protocol dTRINITY suffered an exploit targeting its swap adapter contracts, resulting in the loss of approximately $56,000 belonging to core team members.