🚨 $1.013M USDC drained from TranchePool (linked to Valinor Digital, Oatfi, Fence Finance)
Exploit vector: UTC rollover bug in settlement logic. Contract treated a *scheduled* principal payment as received and reduced outstanding principal — but no actual $USDC was repaid.
Attacker then called draw function (0x8e27c105) which checks: funded principal − outstanding principal. The phantom reduction opened up $1.013M of draw capacity. Same calldata, double withdrawal.
Classic accounting desync.
Attacker: 0x6ff1c3ffa622e1062168f3497a275be9cc2b1246
Vulnerable contract: 0xe25cb545bdd47a8ec2d08001cb5661b00d47621a
Another day, another DeFi rug via logic flaw. DYOR on protocol audits.
Exploit vector: UTC rollover bug in settlement logic. Contract treated a *scheduled* principal payment as received and reduced outstanding principal — but no actual $USDC was repaid.
Attacker then called draw function (0x8e27c105) which checks: funded principal − outstanding principal. The phantom reduction opened up $1.013M of draw capacity. Same calldata, double withdrawal.
Classic accounting desync.
Attacker: 0x6ff1c3ffa622e1062168f3497a275be9cc2b1246
Vulnerable contract: 0xe25cb545bdd47a8ec2d08001cb5661b00d47621a
Another day, another DeFi rug via logic flaw. DYOR on protocol audits.