Atomic (Arbitrum): ~$30k via replayed LP signature + spot price
7–8 Aug 2026: SlowMist and Defimon/Clara flagged ~29,984 USDC drained from Atomic / AtomicLending on Arbitrum (Uniswap V3 LP + leveraged trading).
A manager signature lacked binding to a specific position, caller, nonce, deadline, or chain: so the same approval could be reused across many position IDs.
Combined with a same-transaction flash move of the ARB/USDC Uniswap V3 pool used for valuation, LP positions were burned for more value than they should have paid. Small dollar size; clean “unsigned context + spot price” lesson.
Firm alerts cited: treat as research snapshot, not a full 369 deep-dive of the protocol.
369 take
Off-chain signatures for LP or position actions must name exactly what they authorize: position ID, nonce, deadline, and chain: or one stamp can be reused.
Don’t price critical burns or payouts off a raw same-tx spot pool. Pulse lesson: any signed stake, ramp, or position manager inherits the same gun.
Sources