$6M Summer Finance Exploit: Classic Flash Loan Attack Exposed

Crypto trader Crypto Jargon described the Summer Finance exploit as a classic flash loan attack. The attacker borrowed funds, manipulated liquidity across Curve pools and Morpho, then captured roughly $6 million. Afterward, the attacker repaid the loan within the same blockchain transaction.

The attacker allegedly used a share-accounting weakness via price manipulation to drain about $6 million from Summer Finance. They then swapped the stolen funds into DAI and transferred them to a controlled wallet. Security firm Blockaid identified the exploit and confirmed that attackers drained about $6 million from Summer Finance.

CryptoRank recorded 121 DeFi hacks during 2026 with almost $942 million in reported losses, mostly occurring in the second quarter causing approximately $775 million in damages. The Summer Finance incident adds to a growing number of decentralized finance security breaches this year.