Security Incident · Optimism Ecosystem
Cozy Finance Smart Contract Vulnerability: $160.00K Reported Loss
DeFi protection protocol Cozy Finance on Optimism was exploited for about $160,000.
- Reported loss
- $ 160,000
- Attack category
- Smart Contract Vulnerability
Incident Overview
The attacker first bought PTokens in the Aave v2 and Curve protection markets, then submitted undisputed YES answers to the UMA Optimistic Oracle. The trigger did not independently verify a real Aave/Curve hack, and PToken payout eligibility was not tied to a pre-proposal holder snapshot. After the markets moved to TRIGGERED, the attacker burned PTokens and claimed USDC.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.