In a troubling incident, the decentralized finance platform Summer.fi has faced a significant security breach, resulting in an estimated loss of about $6 million. The exploit was flagged by the security consultancy Blockaid, which shared details of the attack on X on Monday.
Details of the Exploit
According to Blockaid, their detection systems indicated the incident early on Monday morning, estimating losses to be around $6 million at that point. The firm published critical information including the attacker's wallet address and the exploit contract associated with the breach.
- Exploiter address: 0x7BF716167B48CF527725722C6d79494b45B3BDCa
- Exploit contract: 0x0514F827C129C16418a0933E03C99A6AF982FC61
- Affected contracts: 0x98C49e13bf99D7CAd8069faa2A370933EC9EcF17, 0xA9ca4909700505585B1aD2a1579dA3b670FFA9c4, 0xE9cDA459bED6dcfb8AC61CD8cE08E2D52370cB06
Identifying the Impact
Another security firm, PeckShield, pointed to the primary vault affected by the exploit, identified as LazyVault_LowerRisk_USDC (LVUSDC). This vault briefly displayed an astonishing annual percentage yield (APY) of approximately 2.08 million percent.
The largest known holder tied to the exploit is associated with Torben Jorgensen (UDHC), having deposited around 8.6 million USDC into this vault. This adds another layer of complexity to the unfolding situation.
Market Reaction
The incident has had adverse effects on the market performance of Summer.fi's native token, SUMR, which traded at approximately $0.00193, reflecting a decline of 5.3% over the last 24 hours. This downturn contrasts with the wider market trend, which experienced a gain of over 1% on the same day.
This breach marks the second major exploit recorded in the cryptocurrency sector this month, following a spate of attacks in June when over $75 million was lost across multiple platforms.
As this story continues to develop, BeInCrypto has reached out to Summer.fi for further comments.
