Ostium paused all trading after Blockaid reported that an attacker used future-dated oracle reports to trigger an estimated $18 million USDC payout from the protocol's OLP vault.
Blockaid flagged an active Summer.fi exploit with roughly $6M drained, putting Lazy Summer vaults, SUMR and DeFi yield risk back under scrutiny.
Two deprecated Aztec contracts were exploited within four days, draining about $4.4 million and exposing the lasting risk of immutable DeFi code.
Raydium said a legacy AMM V3 exploit drained about $1.34M from five deprecated Solana liquidity pools and that its treasury will cover affected assets.