- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-15
- Last updated: 2026-10-16
Gasless Reservoir Enabler exploit on EVM, 2026-09-21. DeFiHackLabs summary: GaslessReservoirEnabler - erc20WithTransfersAndExecute lets a whitelisted module run unvalidated transferFrom calldata. Loss as recorded by DeFiHackLabs: 8.72 WETH (~$23.8K) across 466 victims with standing approvals to the Enabler; PoC reproduces 3 victims, 2.3546 WETH (~$6.4K, ~27% of the WETH-leg loss). Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the…
Other addresses in this report: 0x46f54c1a86575679fc3d29666c1717e9786279aa