Tools Crypto Exploit Tracker exploit-0024
Exploit record
Summer.fi
- Loss
- $6M
- Attack vector
- Flash Loan
- Chain
- Ethereum
- Sector
- Yield
What happened
On 6 July 2026 Summer.fi's Lazy Summer vaults were exploited for about $6 million in DAI via a flash-loan-assisted price manipulation, prompting the protocol to pause all vaults.
PeckShield confirmed roughly $6 million was extracted after the attacker used a $65.4 million flash loan to manipulate vault share pricing (described by trackers as a donation-style attack), with the largest single victim losing about 8.6 million USDC. Summer.fi paused all Lazy Summer vaults and zeroed deposit caps; researchers linked the exploited pricing weakness to stale tokens left over from the Stream Finance collapse the previous November.
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026