Trader Joe DEX Suffers Frontend Security Breach, Prompts User Warnings

The popular decentralized exchange (DEX), Trader Joe, announced a security breach in its frontend interface on Nov. 17.

The breach, identified in a third-party analytics plugin, potentially exposed numerous users, prompting immediate action by the platform’s team.

🚨 Important Security Alert

We have been alerted to a possible vulnerability in our frontend interface. Our team is conducting an immediate and thorough investigation.

We strongly advise all users to refrain from trading and from executing any transactions on the Trader Joe…
— LFJ.gg (@LFJ_gg) November 17, 2023

The Trader Joe’s team discovered the vulnerability during a routine check, revealing compromised JavaScript code in an analytics tool. The breach occurred at approximately 18:34 GMT, impacting all chains, including Avalanche (AVAX), Arbitrum (ARB), and Ethereum (ETH).

🚨 Update

Our team's preliminary analysis identified a potential exploit in a 3rd party analytics plugin hacked JavaScript code used by our frontend.

We've taken immediate action on this finding and the code has been removed, and our host remains secure with no other… https://t.co/hJBRyOF5gW
— LFJ.gg (@LFJ_gg) November 18, 2023

The team quickly removed the malicious code and temporarily shut down the front end to mitigate the risks. The incident rerouted some users’ transactions to an unknown contract: “0xd8ea…33581bf.”

The Trader Joe’s team urged affected users to revoke access given to this contract.

In response, Trader Joe advised users to check and revoke approvals of the malicious contract using token approval checkers and wallet services.

The DEX also emphasized confirming contract addresses during transactions using their developer documents. The Trader Joe Discord provided guided support.

🚨 Frontend Vulnerability Update

Some users are reporting that Swaps on the frontend are causing tokens to route to an unknown contract: 0xd8ea07f43bc5045ec49ab52a3da2d0bf533581bf

First report raised ~30 minutes ago but if you have used the frontend to trade in the last hours… pic.twitter.com/yayO4AYWHP
— LFJ.gg (@LFJ_gg) November 17, 2023

Following investigation and remediation, Trader Joe has restored its front end, ensuring it is safe for trading, liquidity, staking, and lending.

The DEX aims to prevent future vulnerabilities by eliminating third-party integrations.

Also Read: Tron Founder Offers Hackers $10 Million Bounty to Return Funds

Disclaimer: The information researched and reported by The Crypto Times is for informational purposes only and is not a substitute for professional financial advice. Investing in crypto assets involves significant risk due to market volatility. Always Do Your Own Research (DYOR) and consult with a qualified Financial Advisor before making any investment decisions.

Follow The Crypto Times on Google News to Stay Updated!