Atomic (Arbitrum): ~$30k via replayed LP signature + spot price
7–8 Aug 2026: SlowMist and Defimon/Clara flagged ~29,984 USDC drained from Atomic / AtomicLending on Arbitrum (Uniswap V3 LP + leveraged trading). A manager signature lacked binding to a specific position, caller, nonce, deadline, or chain — so the same approval could be reused across many position IDs. Combined with a same-transaction flash move of the ARB/USDC Uniswap V3 pool used for valuation, LP positions were burned for more value than they should have paid. Small dollar size; clean “unsigned context + spot price” lesson. Firm alerts cited — treat as research snapshot, not a full 369 deep-dive of the protocol.
369 take: Off-chain signatures for LP or position actions must name exactly what they authorize — position ID, nonce, deadline, and chain — or one stamp can be reused. Don’t price critical burns or payouts off a raw same-tx spot pool. Pulse lesson: any signed stake, ramp, or position manager inherits the same gun.