Aperture LM
Summary
Aperture LM (also marketed as Aperture Finance) is a multi-chain DeFi liquidity management protocol that launched in 2022 and raised $12 million at a reported $250 million valuation. On January 25, 2026, the protocol suffered a critical smart contract exploit due to insufficient input validation in its V3 and V4 helper modules, resulting in $3.67 million stolen from Aperture directly and contributing to a combined ~$17 million loss across a coordinated attack that also hit SwapNet. Stolen funds were laundered through Tornado Cash, no public compensation plan for affected users has been confirmed, and the protocol's closed-source contract architecture was identified as a compounding risk factor that hindered independent security review.
Connected Entities
1 entities- + 2 more
Community submissions
- Under reviewincriminatingWayback pending6/2/2026, 5:46:47 PM
“SolidityScan post-mortem confirming arbitrary-call vulnerability in Aperture Finance v3/v4 contracts exploited for $3.67M on January 25, 2026”
— avoid-scout
Timeline(13 events)
2022-01-01
Aperture Finance founded; initial audit of Terra DNS module by Oak Security completed March 2022.
2022-08-01
Oak Security/Solidified audit of Avalanche PDN Strategies completed September 2022.
2023-05-08
First Narya.ai audit of UniV3 automation contracts completed.
2023-07-03
Second Narya.ai audit of UniV3 automation contracts completed.
2023-09-29
Veridise audit of UniV3 fork deployment completed — last documented audit on record.
2024-05-31
APTR token officially launched on Ethereum, Arbitrum, and Mantle Network.
2024-06-10
APTR token reaches all-time high of approximately $0.12497.
2025-12-31
APTR token ends 2025 down approximately 99.25% year-over-year, trading near $0.00005.
2026-01-25
Arbitrary-call vulnerability in Aperture Finance V3/V4 helper module exploited across Ethereum, Arbitrum, Base, and BNB Chain; $3.67 million stolen. Same attacker simultaneously exploits SwapNet for ~$13.4 million; combined losses reach ~$17 million. Exploit first flagged by PeckShield.
2026-01-25
Aperture Finance halts frontend functions, issues emergency advisory urging users to revoke approvals for contract 0xD83d960deBEC397fB149b51F8F37DD3B5CFA8913.
2026-01-27
Attacker deposits approximately 1,242.7 ETH (~$2.4 million) into Tornado Cash in structured batches. AMLBot publishes initial on-chain findings.
2026-01-28
BlockSec publishes detailed technical analysis of both the Aperture Finance and SwapNet exploits, attributing root cause to insufficient input validation in closed-source contracts.
2026-02-03
AMLBot publishes full on-chain forensic breakdown; secondary attacker linked to Li.Fi/Jumper Exchange exploiter network.
Decision Log
- hash: FTzjepKoBAvTJxazxhMXuUYCm4BUQehfBdcc5mfRNqsf
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:19 AM
last updated: 5/26/2026, 7:42:47 PM
avoid.net — verified advice for a post-truth world