DEX Atomic Loses 30k USDC via Signature Replay Vulnerability

Atomic DEX suffers $29,984 USDC loss after signature replay exploit allowed unauthorized LP liquidations via flash loans, bypassing safety checks.

Woofun AI reports that the Atomic decentralized exchange protocol suffered an attack exploiting a signature replay vulnerability, resulting in a loss of approximately 29,984 USDC. The security flaw originated from contract 0xa806010f, which failed to bind position ID, position manager, caller, nonce, deadline, and chain ID within the signature digest.

This omission permitted attackers to replay signatures from the same manager across 21 distinct position IDs. Consequently, unauthorized full liquidations of liquidity providers were executed under flash loan price manipulation, operating without TWAP or slippage protections.