SlowMist reports ~$59.8k loss in Argent-style smart wallet exploit
SlowMist reported a roughly $59.8k loss from an exploit against an Argent-style smart wallet system, citing two flaws in its recovery and execution modules. The post says an unrestricted setter allowed a crafted recovery period to wrap the deadline into the past, letting a guardian-signed recovery finalize in the same transaction and change the wallet owner, while the execution module failed to reject reuse of an identical signed payload. SlowMist states the attacker used the repeated executions to trade around a low-liquidity MARK/WETH pool.
Why “Unverified”
- Reported by SlowMist alone, with no second source or primary confirmation yet
1 independent source group across 1 post · evidence score 72/100. How labels work
What the sources claim
-
SlowMist attributes the loss of about $59.8k to two exploitable flaws in an Argent-style smart wallet system.
“Loss: ~$59.8k 🔍 Root Cause: The affected Argent-style smart wallet system exposed two exploitable flaws”
SlowMist -
An unrestricted setter in the recovery module let a crafted recovery period wrap the deadline to a past timestamp, allowing a guardian-signed recovery to finalize in the same transaction and change the wallet owner.
“the unrestricted 0x254a2e49 setter allowed a crafted recovery period to make the calculated deadline wrap to a timestamp in the past”
SlowMist -
The execution module failed to reject reuse of an identical signed payload, which succeeded 19 times in one transaction and nine times in another.
“the execution module failed to reject reuse of an identical signed 0xaacaaf88 payload: it succeeded 19 times in one transaction and nine times in the other”
SlowMist -
The attacker used the repeated executions to trade around a low-liquidity MARK/WETH pool.
“The attacker used the repeated executions to trade around a low-liquidity MARK/WETH pool”
SlowMist
Sources
- 🚨SlowMist TI Alert🚨 → slowmist.ai
More in Hacks & Security
Summary and claims extracted by AI with prompt analyze-story@5 on 2026-10-19 12:30 UTC. Labels are computed from the sources, not by the model.