About 15.4536 ETH, worth roughly $38,000, was drained from ether.fi’s legacy withdrawal queue after an attacker abused stale ERC-20 approvals tied to an outdated Veda-built AtomicQueue contract. The exploit affected 11 wallets and stemmed from an unauthenticated solver field in the queue’s solve() function, which allowed the attacker to name victim wallets as solvers and redirect approved liquidETH and USDC to an intermediary contract. Nine wallets lost a combined 14.4455 liquidETH and two lost about 7.05 USDC, with the proceeds swapped into ETH and routed partly through Tornado Cash. CEO Mike Silagadze said the issue was resolved and affected users would be reimbursed. The incident did not compromise eETH or weETH minting, the LiquidityPool or current Liquid vault accounting. ETHFI was trading at $0.6611, up 6.21%, according to CoinMarketCap.