Stories tagged: #summer-fi

exploit

Summer.fi drained of $6M as attacker donates stale-priced Silo token into Lazy Summer vault

Summer.fi's Lazy Summer vaults lose $6.04M in an ERC-4626 donation attack. Root cause: a Silo Varlamore USDC vault token stale-priced since November's Stream Finance collapse. Vaults paused.

July 9, 2026

exploit

Summer.fi loses $6M as attacker manipulates FleetCommander totalAssets()

A flash-loaned donation to Summer.fi's Ark inflated FleetCommander.totalAssets() and let an attacker redeem $70.9M from a $64.8M deposit. Lazy Summer vaults paused; funds are moving to Tornado Cash.

July 7, 2026