{"id":"8575","name":"Pennysia","address":null,"symbol":"-","url":"","description":"Pennysia is the unified interface connecting all exchanges and liquidity platforms, onchain and offchain, to deliver the best liquidity to users","chain":"Ethereum","logo":"https://icons.llamao.fi/icons/protocols/pennysia","audits":"2","gecko_id":null,"cmcId":null,"category":"DEX Aggregator","chains":["Ethereum"],"module":"dummy.js","twitter":"PennysiaLabs","audit_links":["https://github.com/Pennysia/settlement/tree/main/audits"],"github":["Pennysia"],"listedAt":1788629987,"dimensions":{"aggregators":"pennysia","fees":"pennysia"},"tvlCodePath":null,"chainTvls":{"Ethereum":{"tvl":[],"tokensInUsd":[],"tokens":[]}},"tvl":[],"tokensInUsd":[],"tokens":[],"currentChainTvls":{},"raises":[],"hacks":[{"date":1794528000,"name":"Pennysia","classification":"Access Control","technique":"Arbitrary External Call","amount":5131,"chain":["Ethereum"],"bridgeHack":false,"targetType":"DeFi Protocol","source":"","returnedFunds":null,"defillamaId":"8575","language":"Solidity","description":"On November 12, 2026, an attacker exploited an arbitrary external call vulnerability in Pennysia's Settlement contract on Ethereum, stealing approximately $5,131 from four users. The attacker deployed malicious tokens to bypass spending checks in the executeSwap() function, then abused existing ERC-20 allowances to transfer USDC, wstETH and YUNO directly from users' wallets through the vulnerable contract"}],"mcap":null}