Ekubo’s previously disclosed Ethereum security incident has new technical detail from SlowMist founder Yu Xian, who said an Ekubo-related contract was maliciously exploited and user 0x765DEC lost 17 WBTC. According to Yu Xian, the attacker executed the exploit 85 times at 0.2 WBTC each by abusing prior token approvals and Ekubo Core withdraw/pay flows. This adds to Ekubo’s earlier statement that about $1.4 million was taken through exploitation of a custom extension contract on Ethereum, with user risk limited to wallets that had approved the affected contract. Users were urged to review and revoke approvals for the listed V2 and V3 contracts.