Affected scope
Ethereum app 1.20.0–1.22.2
What the attack requires
Compromised swap/provider path.
What changed
Ethereum app 1.22.3.
What this finding establishes
Approval remained constrained to the accepted provider, asset and quantity.
Ledger / Public disclosure
Swap approval accepted as payment
A token approval could satisfy a swap payment check.
Source date: 2026-08-27Reviewed: 11 October 2026