www.cryptopolitan.com Ajna Protocol Exploit: $775,400 Lost in DeFi Attack
Article Content
- •Ajna Protocol lost approximately $775,000 due to an exploit manipulating internal liquidation logic.
- •The attack targeted multiple liquidity pools, with syrupUSDC suffering the largest loss.
- •Defimon detected the attack preparations but could not secure the protocol in time.
Ajna Protocol, a DeFi lending platform without price oracles, suffered an exploit resulting in a loss of approximately $775,000 in ETH. The attack occurred between August 28 and 29, 2026, when the attacker manipulated the platform's internal liquidation accounting, draining funds from multiple liquidity pools. The syrupUSDC pool was hit hardest, losing around $173,700. Ajna's design philosophy, which eliminates external price feeds and governance, was exploited, raising concerns about its security assumptions. Monitoring firm Defimon detected the attack preparations over an hour before the exploit began but could not prevent it. Following the incident, Ajna's total value locked (TVL) plummeted to $246,880, reflecting a 71.3% decline. The incident highlights vulnerabilities in DeFi protocols that do not utilize price oracles. The current status of the protocol remains uncertain as users are advised to withdraw their funds.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track Ajna in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…
Critical Zero-Day Exploit Found in BeyondTrust Remote Support BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE since August 2026. This flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring…