The buggy function was intended to allow users to provide their own routing information, but the code did not limit routers to a preapproved list.
Dexible aggregator hacked for $2M via ‘selfSwap’ function [cointelegraph]
The buggy function was intended to allow users to provide their own routing information, but the code did not limit routers to a preapproved list.