A BNB Chain decentralized-exchange router was reportedly exploited for approximately 62.28 BNB after attackers forged a Uniswap V3-style pool or adapter and abused users’ existing ERC-20 approvals. SlowMist said the router did not verify whether the caller was a legitimate V3 pool and failed to bind the callback’s payer address to the original transaction context. By supplying victims’ addresses as payers, attackers allegedly triggered transferFrom() to move assets without compromising private keys or requiring further user interaction. Earlier reporting attributed the incident to ExVul, identified 29 affected wallets and described the proceeds as approximately 62.28 WBNB; SlowMist’s latest alert reports 62.28 BNB. The router team has not independently confirmed the claims, and the full scope of affected wallets, tokens and allowances remains unclear. Users should review and revoke unnecessary approvals, although revocation cannot recover assets already transferred.