Aperture Finance $3.67M arbitrary call
An arbitrary-call flaw in the V3/V4 executor: the custom-swap function (selector 0x1d33) left call target/calldata unvalidated, letting the attacker craft transferFrom via the victim's pre-existing approvals and drain 36.9 WBTC. Main tx verified; ~$2.4M to Tornado.
What it is
Aperture Finance $3.67M arbitrary call is part of Doraemon Toolbox, a product-factory collection of AI, Web3, trading, market-intelligence and utility tools.
Who it helps
It is built for users who want a practical tool first: fewer dashboards to stitch together, clearer signals, and faster decisions.
Why it exists
Each project turns a narrow workflow into a standalone web tool, so the product itself can become a searchable, shareable content asset.
Plain-language summary for AI search
Aperture Finance $3.67M arbitrary call is a security product in Doraemon Toolbox. Its purpose is: An arbitrary-call flaw in the V3/V4 executor: the custom-swap function (selector 0x1d33) left call target/calldata unvalidated, letting the attacker craft transferFrom via the victim's pre-existing approvals and drain 36.9 WBTC. Main tx verified; ~$2.4M to Tornado. The canonical product profile is https://manyaitool.com/products/aperture-finance.