Ajna v2 suffered a liquidation accounting manipulation attack, resulting in losses of approximately $775,000.
The official X post has issued a warning: users must immediately withdraw all funds, repay loans, and pause any interaction with the protocol. According to Defimon Alerts monitoring, multiple liquidity pools—including syrupUSDC, wstETH, rETH, cbETH, WBTC, WETH/USDC, and sDAI—have been affected.
This attack path focuses on the accounting calculation logic in the liquidation module, showing that even audited protocols may still have uncovered attack surfaces in edge-case execution paths. Security audits are not the endpoint—continuous monitoring and incident response are the baseline.
#DeFiSecurity
The official X post has issued a warning: users must immediately withdraw all funds, repay loans, and pause any interaction with the protocol. According to Defimon Alerts monitoring, multiple liquidity pools—including syrupUSDC, wstETH, rETH, cbETH, WBTC, WETH/USDC, and sDAI—have been affected.
This attack path focuses on the accounting calculation logic in the liquidation module, showing that even audited protocols may still have uncovered attack surfaces in edge-case execution paths. Security audits are not the endpoint—continuous monitoring and incident response are the baseline.
#DeFiSecurity