Asterix Reports Uniswap v4 Pool Exploit on June 8, Losing About 30 ETH in 242 Trades

Asterix said its Uniswap v4 liquidity pool was attacked on June 8, with an attacker executing 242 transactions to steal about 30 ETH. According to ChainCatcher, SlowMist founder Yu Xian said the Asterix incident appears similar to attacks reported a day earlier involving Flooring Protocol and BMP, citing a shared pattern tied to NFT ID shift operations and overflow reuse across related underlying standards. Asterix said the exploit affected the ASTX token contract and stemmed from an early DN404 version that lacked checks restricting token IDs during approval operations. The attacker allegedly used outdated token approvals to repeatedly sell tokens into the pool to obtain ETH, then extracted an equivalent amount of tokens via forged IDs, repeating the cycle until funds were drained. Asterix said smart contracts are immutable and cannot be patched, and advised users to stop interacting with the current pool and token. The team said it is planning a migration and deployment of a safer token. Asterix also said it suspects the attacker used a jailbroken AI tool to conduct fuzz testing and identify unconventional logic paths.