EtherVista pair K-invariant overflow exploit attacker
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-14
- Last updated: 2026-10-16
EtherVista exploited on 2026-10-09: EtherVistaPair.swap() K-invariant check overflowed (uint112 reserves), letting an attacker-controlled contract registered as the authorized router drain WETH and VISTA from the pool in two swaps. SlowMist states loss '~18.6K'. Attacker 0xbbf8f3fe8e4fdf6b594e6107144d78293d2018fa; attack contract (router) 0x469424b628a9d2036e41496e814db500d683b120. Vulnerable contract excluded. Chain: EVM (the alert does not name the chain). Source: SlowMist TI Alert https://x.com/SlowMist_Team/status/2108427455572918626 (2026-10-09). Confidence: High (explicit attacker…
Other addresses in this report: 0x469424b628a9d2036e41496e814db500d683b120