Ekubo's router contract was exploited for $1.42 million taken from 31 addresses. TokenPost broke the news. A router is the contract that sits between a trader and the liquidity pools: it picks the best path for a swap and moves tokens along it.
When that contract has a flaw, the flaw can be used to pull funds out of the addresses that approved it. That's what happened here, and 31 addresses lost money.
The size of the loss is $1.42 million. That's not a protocol treasury being drained in one shot. It's 31 separate wallets, which means 31 separate victims approved the router at some point and the exploit reached each of them. The number of addresses matters as much as the dollar figure, because it tells you how the exploit spread.
Ekubo's router lost $1.42 million from 31 addresses
The affected addresses had granted the router permission to move their tokens. A router needs that permission to do its job, since it has to pull tokens in and push swapped tokens back out. The exploit used that permission against the holders.
$1.42 million left 31 addresses, per TokenPost. The story is still developing and the exact technical steps have not been published in full.
What holders can do now is check which contracts they've approved and revoke the ones they don't need. Revoking costs a small gas fee. It doesn't recover lost funds, but it stops a second drain if another flaw exists. Anyone who used Ekubo's router and hasn't checked their approvals should do that today.
Aerodrome and Velodrome merge into Aero across seven networks
Aerodrome and Velodrome are merging. The combined protocol will launch Aero across seven blockchain networks, The Block reported on October 21, 2026. Aerodrome has been the dominant DEX on Base. Velodrome has played the same role on Optimism. Merging the two into one brand and one token changes the competitive map for DEX liquidity on those chains.
Seven networks is the key number. It means Aero isn't just a rebrand of two existing products. It's an attempt to run one liquidity layer across more chains than either predecessor touched on its own.
The Block's report is dated October 21, 2026, so this is fresh. Holders of the old tokens will need to watch for conversion details, which haven't all been published yet.
Arbitrum active addresses spike, then fall back
Arbitrum active addresses hit a 30-day high, then retreated, The Defiant reported. Active addresses count wallets that sent at least one transaction in a period. A 30-day high means more wallets were active on Arbitrum than at any point in the prior month. The retreat means that spike didn't hold.
The pattern matters more than the peak. A spike followed by a retreat usually means a one-off event pulled users in for a short window: a token launch, an airdrop claim, or a temporary incentive. Sustained growth looks like a new baseline, not a peak and a fall.
Arbitrum's numbers show the former, not the latter, per The Defiant. Whether activity re-tests that high depends on what comes next on the chain.
Three numbers will settle this
Three things resolve from here. Whether Ekubo publishes a full post-mortem and a recovery plan for the 31 addresses. Whether Aero's seven-network launch keeps its October timeline.
And whether Arbitrum's active addresses set a new 30-day high or keep sliding. The $1.42 million figure is the one to watch on the first. The other two will show up in network data and protocol announcements.