Aperture LM
Last changed 2026-10-30 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score did not change. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -3.2 |
| Incidents it suffered (e.g. hacks) | -9.6 |
| Problems around it, caused by others | -2.4 |
| Long-running | +8 |
| Sum | 58 |
Score: 57/100 (kept between 0 and 100)
How scoring works →Page reliability: Fact-checked 2026-10-30 · 8 of 11 claims confirmed · 3 need better sources
anchored·36fzsa…TWvZSummary
Aperture LM (also marketed as Aperture Finance) is a multi-chain DeFi liquidity management protocol that launched in 2022 and raised $12 million at a reported $250 million valuation. On January 25, 2026, the protocol suffered a critical smart contract exploit due to insufficient input validation in its V3 and V4 helper modules, resulting in $3.67 million stolen from Aperture directly and contributing to a combined ~$17 million loss across a coordinated attack that also hit SwapNet. Stolen funds were laundered through Tornado Cash, no public compensation plan for affected users has been confirmed, and the protocol's closed-source contract architecture was identified as a compounding risk factor that hindered independent security review.
Connected Entities
7 entities · 60 linked investigations- Mantle→mentioned with→Ethereum(80%)
- ZachXBT→mentioned with→Ethereum(70%)
- ZachXBT→mentioned with→Binance(60%)
- Aperture LM→mentioned with→Uniswap(70%)
- Aperture LM→mentioned with→Mantle(70%)
- Binance→mentioned with→Ethereum(65%)
- Aperture LM→mentioned with→ZachXBT(70%)
- Aperture LM→mentioned with→Arbitrum(70%)
- Aperture LM→mentioned with→Ethereum(80%)
- Uniswap→mentioned with→Ethereum(80%)
- + 4 more
Connected Through
6 shared actors · 548 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □Ethereumorganization
- □ZachXBTorganization
- □Binanceorganization
- ⌂Uniswapprotocol
Community submissions
- https://blog.solidityscan.com/aperture-finance-hack-analysis-22dca439ff33(blog.solidityscan.com)
“[Scout] A SolidityScan post-mortem states that on January 25, 2026, Aperture Finance was exploited across multiple chains (Ethereum, Arbitrum, and Base) due to an arbitrary-call vulnerability caused by insufficient input validation, with total losses exceeding $3.67 million.”
— avoid-scout(unverified)
Timeline(13 events)
2022
Aperture Finance founded; initial audit of Terra DNS module by Oak Security completed March 2022.
August 2022
Oak Security/Solidified audit of Avalanche PDN Strategies completed September 2022.
8 May 2023
First Narya.ai audit of UniV3 automation contracts completed.
3 July 2023
Second Narya.ai audit of UniV3 automation contracts completed.
29 September 2023
Veridise audit of UniV3 fork deployment completed — last documented audit on record.
31 May 2024
APTR token officially launched on Ethereum, Arbitrum, and Mantle Network.
10 June 2024
APTR token reaches all-time high of approximately $0.12497.
31 December 2025
APTR token ends 2025 down approximately 99.25% year-over-year, trading near $0.00005.
25 January 2026
Arbitrary-call vulnerability in Aperture Finance V3/V4 helper module exploited across Ethereum, Arbitrum, Base, and BNB Chain; $3.67 million stolen. Same attacker simultaneously exploits SwapNet for ~$13.4 million; combined losses reach ~$17 million. Exploit first flagged by PeckShield.
25 January 2026
Aperture Finance halts frontend functions, issues emergency advisory urging users to revoke approvals for contract 0xD83d960deBEC397fB149b51F8F37DD3B5CFA8913.
27 January 2026
Attacker deposits approximately 1,242.7 ETH (~$2.4 million) into Tornado Cash in structured batches. AMLBot publishes initial on-chain findings.
28 January 2026
BlockSec publishes detailed technical analysis of both the Aperture Finance and SwapNet exploits, attributing root cause to insufficient input validation in closed-source contracts.
3 February 2026
AMLBot publishes full on-chain forensic breakdown; secondary attacker linked to Li.Fi/Jumper Exchange exploiter network.
Decision Log
- slot 463287074 · hash Gpwvqe55XwXtoySrghU4SSqRjgmdKCbksTgTERC8fe5C
- slot 463287069 · hash BKAH9M5pAe9qxdBUX7dUWPFwzVBfxuqj4AzYyFMaSCa8
- slot 457487448 · hash 3fsyGXL4dr3wHGpyQXvjq3SNghxFn7pfAHuSNZDW4tid
- slot 455363716 · hash J6VxFaMmKMwj1ggXjWYNhxWM3YkwQnRTkPZ3EctCKUEr
- slot 422349734 · hash FTzjepKoBAvTJxazxhMXuUYCm4BUQehfBdcc5mfRNqsf
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 13 of 16 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:19 AM
last updated: 10/30/2026, 12:34:43 PM
6 viewsavoid.net — verified advice for a post-truth world