In 2020, a hacker used a flash loan to borrow massive funds at zero cost and attacked the bZx protocol, profiting $350,000 in one go. The DeFi world saw the power of 'empty-handed kung fu' for the first time.