Summer.fi Suffers $6M Loss in Flash Loan Exploit

Kucoin

Summer.fi Suffers $6M Loss in Flash Loan Exploit

First seen 6 Jul 2026, 10:19 UTC • •66.0

Article Content

1 / 7

Browse articles

ThreatCluster •July 7, 2026 at 06:50 UTC

•Summer.fi lost approximately $6 million in a flash loan exploit on July 6, 2026.
•The exploit manipulated asset valuation logic, allowing the attacker to redeem inflated assets.
•Summer.fi has not yet confirmed the attack or provided details, leaving users concerned.

On July 6, 2026, the DeFi platform Summer.fi was exploited, resulting in the theft of approximately $6 million in DAI. The attack was detected by Blockaid, which identified an exploit involving a flash loan of $64.8 million that manipulated the asset valuation logic within the Lazy Summer Protocol. The attacker was able to redeem around $70.9 million in assets before repaying the flash loan, pocketing the difference. Summer.fi has not yet issued a public statement regarding the incident, and investigations are ongoing. This incident marks a significant breach for Summer.fi, which had previously been secure. The attack highlights vulnerabilities in DeFi protocols, particularly those relying on automated asset management. Users are advised to exercise caution and conduct thorough due diligence before investing in similar platforms.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 95d ago How this analysis works

Timeline

2026-07-06

Summer.fi exploit detected

Blockaid identified a $6 million theft from Summer.fi due to a flash loan exploit manipulating asset valuations.

2026-07-06

Summer.fi acknowledges exploit

Summer Finance confirmed awareness of the exploit and is investigating the root cause while pausing all vaults.

2026-07-06

Details of the exploit revealed

The attacker used a flash loan of $64.8 million to manipulate asset valuations, resulting in a profit of $6 million.

More articles in this cluster (6)

Threat Graph

3 entities, 1 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Malware (1)

Blockaid

Affected Platform (1)

Lazy Summer Protocol

Relationships

Data Breach targets Lazy Summer Protocol

Following this threat?

Track Blockaid in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…