Breaches and incidentsBriefConfirmed by two or more outlets
Summer.fi (Summer Finance): vault share accounting manipulated with a flash loan
6 Jul 2026: about USD 6M in DAI drained (PeckShield).
- Disclosed
What happened
- 6 Jul 2026: about USD 6M in DAI drained (PeckShield). CertiK: a USD 65.4M flash loan, a USD 64.8M deposit and a USD 70.9M redemption.
- Root cause per CertiK and Cyvers: manipulation of how the Fleet Commander contract reported totalAssets() across vaults, using a pre-accumulated position and a donation to an Ark contract.
- Attribution: none.
- Response: Summer.fi later announced it would wind down, according to secondary reports.
Sources
- https://www.theblock.co/post/407198/summer-finance-exploited
- https://thedefiant.io/news/hacks/summer-finance-drained-of-6m-in-flash-loan-exploit
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.