Security Incident · Polygon Ecosystem
BitBay StableVault Smart Contract Vulnerability: $14.00K Reported Loss
BitBay’s Polygon DAI/USDC vault, UsdcDaiV4Vault, was exploited.
- Reported loss
- $ 14,000
- Attack category
- Smart Contract Vulnerability
Incident Overview
The attacker first called reposition() to force the vault’s liquidity to zero, then redeemed only one minimal share. Because _withdraw() sends the contract’s entire token balance when liquidity == 0 instead of the user’s proportional share, about 14,838.47 DAI (roughly $14,000) was drained.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.