According to ChainCatcher, DeFi yield aggregator ACryptoS disabled deposits after an attack on its vaults, while keeping withdrawals open. The protocol said a lack of input validation allowed the attacker to deposit a negligible amount of tokens and mint most of the shares in the vaults.

The attack affected 77 vaults across five chains, causing losses of about $665,000. The stolen funds have since been moved through multiple cross-chain protocols. ACryptoS offered the attacker a 10% bounty for returning the funds. Citing its inability to continue maintenance, the project said it had ceased operations and urged users to withdraw their assets as soon as possible.