# Slice’s FundsModule Contract Exploit Causes About $41,000 Loss By Simon Yoon Canonical URL: https://www.tokenpost.com/news/technology/36769 Published: 2026-10-21T14:58:37.000Z Updated: 2026-10-21T14:58:37.000Z Section: Technology > A function relied on release amounts from caller-selected contracts without checking that Ether (ETH) or USD Coin (USDC) had arrived. An attacker exploited Slice’s FundsModule contract, causing a loss of about $41,000 after a withdrawal function accepted reported release amounts without checking that the corresponding assets had reached the contract. The function with selector 0x9d2edfac relied on release amounts reported by contracts selected by the caller. It permitted withdrawals without verifying that FundsModule had received the corresponding Ether (ETH) or USD Coin (USDC). The release amount determined how much the function would make available for withdrawal. The missing check between that figure and the assets actually received allowed funds to leave without a matching transfer into FundsModule. The loss exceeds those in two earlier, separate smart contract incidents. A [BitBay Vault exploit]() caused a loss of about 14,838.47 Dai (DAI) after its withdrawal function sent the vault’s full token balance when liquidity reached zero. An [Ethervista pool attack]() caused an estimated $18,600 loss through a flaw in swap validation. ## Links in this article - [BitBay Vault exploit](https://www.tokenpost.com/news/technology/28691) - [Ethervista pool attack](https://www.tokenpost.com/news/technology/28740)