An attacker exploited the EtherRouterCreate3 contract's meta-transaction mechanism by abusing the arbitrary self-call capability combined with DSAuth's automatic authorization logic for address(this). The attacker bypassed the auth modifier, replaced the contract's core routing component (resolver) with a malicious version, then used delegatecall to drain all ERC20 assets. A second related exploit shortly after brought total losses to $182.7K.

ShapeShift’s FOX Colony (a community governance and participation program for FOX token holders) on Arbitrum was exploited via a smart contract vulnerability in its Colony Network contracts. The attacker drained approximately $132.7K in USDC and FOX tokens in a single sophisticated transaction by exploiting a meta-transaction self-call flaw combined with DSAuth authorization logic. The core exchange platform was unaffected; this impacted the DAO/community treasury.