Argent-style Ethereum smart wallet exploit drains $59.8K

On 19 October 2026 an attacker drained Argent-style smart wallets on Ethereum mainnet in two transactions. SlowMist puts the loss at about $59.8K: an unrestricted setter in the recovery module let a crafted period wrap the deadline into the past, and the execution module never marked signed payloads as used, so one signature ran 28 times.

• Loss estimated at about $59.8K across blocks 26225798 and 26225803
• Unrestricted recovery-period setter wrapped the deadline into the past
• One signed payload executed 28 times: 19 and 9 in two transactions
• Replays forced victim wallets to buy MARK in a thin Uniswap V2 pool