Summer.fi Vault Hacked for $6 Million in Crypto Exploit

A recent crypto hack drained around $6 million from Summer.fi's vaults, raising concerns about the security of DeFi yield platforms.

The attack targeted a platform built on automated yield management, with Summer.fi offering users access to DeFi returns through vaults that route deposits across lending and yield markets.

A flash loan reportedly manipulated vault asset reporting, allowing the attacker to inflate the reported assets of an Ark strategy contract to around $7.14 million.

The exploit allegedly abused trust between the parent vault Fleet Commander and the Ark strategy contract, with the attacker redeeming roughly 71 million USDC before repaying the flash loan.

The affected vault was risk-managed by Block Analitica, and a large holder had deposited around 8.6 million USDC into the vault, making the exploit more damaging for concentrated users.