Squid Clarifies Involvement in Recent Attack

Squid, a cross-chain routing protocol, has clarified its involvement in a recent attack reported by Blockaid. According to Foresight News, Squid stated that the SquidRouterModule implicated in the attack was not developed, deployed, or operated by them. Instead, it was a third-party Gnosis Safe module that chose to integrate with protocols like Squid, with no prior connection between the parties. Squid explained that the third-party module contained a vulnerability, accepting a fixed string provided by the caller for message security verification. Attackers exploited this by using the publicly visible string in the contract's verified code to execute arbitrary call data and steal funds. Squid emphasized that its own routing contract (0xce16F) is architecturally different from the affected module and remains unaffected, ensuring the safety of user funds, authorizations, and integrations.