According to CoinMeta, and as monitored by SlowMist, the decentralized exchange Atomic was attacked due to a signature replay vulnerability, resulting in a loss of approximately 29,984 USDC. The vulnerability stemmed from contract 0xa806010f, which lacked the binding of position, id, position, manager, caller, nonce, deadline, and chain id in the signature digest. This allowed the same manager signature to be replayed on 21 different position id, enabling unauthorized full LP executions under the guise of lightning loan price manipulation, without any TWAP or slippage checks.