Lazy Summer exploit - 07.06.2026

report.md Summer.fi USDC Vault Exploit — Post-Mortem A technical breakdown from the smart-contract side. For the coordinated incident response, see Summer.fi's official channels. Two Summer.fi FleetCommander vaults (LowerRisk + HigherRisk USDC) drained for ~$6.02M in a single atomic, flash-loan-funded transaction via a donation / NAV-inflation attack on an ark that was being offboarded but was still counted in the vault's share price.