$XMR $ZEC $DASH
TLDR
Summer.fi hit by $6M flash-loan exploit. Attacker manipulated vault accounting for outsized redemptions; funds swapped to DAI and moved on.
Exploit Mechanics
Analysts flag share-accounting flaw in Lazy Summer Protocol. Flash loan ballooned deposit into $70.9M redemption via skewed totalAssets() on Silo vaults.
Key Details
- $65.4M loan funded attack on FleetCommander and Ark contracts.
- Blockaid and CertiK spotted breach early Monday; Cyvers tracked DAI swap.
- Protocol uses AI keepers for yield across lenders; root cause unconfirmed.
Market Pulse
No official Summer.fi statement yet. On-chain sleuths ID'd attacker wallet; users told to pause interactions.
TLDR
Summer.fi hit by $6M flash-loan exploit. Attacker manipulated vault accounting for outsized redemptions; funds swapped to DAI and moved on.
Exploit Mechanics
Analysts flag share-accounting flaw in Lazy Summer Protocol. Flash loan ballooned deposit into $70.9M redemption via skewed totalAssets() on Silo vaults.
Key Details
- $65.4M loan funded attack on FleetCommander and Ark contracts.
- Blockaid and CertiK spotted breach early Monday; Cyvers tracked DAI swap.
- Protocol uses AI keepers for yield across lenders; root cause unconfirmed.
Market Pulse
No official Summer.fi statement yet. On-chain sleuths ID'd attacker wallet; users told to pause interactions.