FutureSwap exploit analysis
FutureSwap's wrapped-underlying mismatch gave the attacker a settlement unit-count that exceeded the actual underlyings. DeFiHackLabs reconstructs about $433K drained.
- Reported loss
- 433K USD, per DeFiHackLabs
- Occurred
- Logged
- Source
- DeFiHackLabs
Logged as “2026-01-10: Unit Mismatch on FutureSwap”.
Analysis1 min read
FutureSwap's settlement wrapped the underlying token in a tokenized wrapper whose decimals mismatch was not caught at wrap time. The attacker wrapped a small amount of the underlying, settled against the inflated-tokenized unit count, and walked the wrap's surplus out as actual underlyings.
DeFiHackLabs reconstructs the sequence against the live Ethereum state; [the drain is referenced in the README]. Total loss is approximately $433K USD.
What would have prevented it: a wrap-time decimals check that rejects any underlying amount whose wrapped-unit count is not 1:1.
Other exploits
- Makina exploit analysis 20 Jan 2026
- SynapLogic exploit analysis 20 Jan 2026
- MTToken exploit analysis 12 Jan 2026
- Truebit exploit analysis 9 Jan 2026
- PRXVT exploit analysis 1 Jan 2026
- Flare Network exploit analysis $8.5M
Query every incident yourself — free, no signup
Updated 14 Oct 2026. Figures are as reported by the sources listed above and are not independently verified.
The crypto data layer for humans, apps, and AI agents.
