Odaily Planet Daily News Amber Group published a statement saying that its blockchain security team discovered a serious reentrancy vulnerability in two vaults (SCSEMVT and YCSEMVT) of the zero-interest loan agreement Mai Finance on October 18. The vulnerability would allow attackers to manipulate collateral prices, borrow all funds from the pool and withdraw funds. After Amber Group contacted the QiDao team on October 19, QiDao proposed a solution and deployed a new oracle contract on October 20.