Ambient Finance — CrocSwap Price Manipulation Exploit

Timeline: On June 7, 2026 at 15:26:35 UTC (Block 25266405), an attacker exploited Ambient Finance's CrocSwap DEX on Ethereum, extracting approximately $110,600 through a price manipulation attack. The attacker, whose address was subsequently labeled 'Ambient Finance Exploiter 2' by Etherscan, deposited 50 ETH into the protocol and received 83.721988 ETH in return within a single transaction — a net gain of approximately 33.72 ETH. The exploit likely leveraged a price oracle or liquidity imbalance in the CrocSwap pool that allowed the attacker to withdraw significantly more than deposited. The exact root cause has not been publicly confirmed in a formal post-mortem as of June 13, 2026. Funds remain in the attacker's wallet; no mixer activity confirmed.