DeFi & Smart-Contract Security19 July 2026
Summer Finance's $6M Vault Accounting Bug Ends in Full Shutdown
A flash-loan attacker exploited how Summer Finance's Fleet Commander vault priced its underlying strategies, extracting $6 million in a single transaction — and the protocol has now wound down entirely.
defi-securityflash-loan-attacksmart-contract-security
4 min readRead
Web3 & DeFi Security11 July 2026
Summer.fi's $6M Vault Exploit Is a Playbook for Donation-Based Share Manipulation
A three-month-old attacker wallet used a $65M flash loan and a donation to a strategy adapter pending removal to skew vault share pricing, draining $6.04M from two Lazy Summer USDC vaults before guardians could react.
defi-securityflash-loan-attacksmart-contract-exploit
5 min readRead