$6.04 Million Stolen from Summer Finance's Lazy Summer Depositors
Summer Finance experienced a significant security incident resulting in a loss of $6.04 million. The incident involved a stale asset that inflated share prices, draining real liquidity.
Our full investigation: Summer.fi exploit: 6 million DAI became 3,294 ETH in Tornado Cash — through the attacker’s own router, over 16 days
On July 9, 2026, Summer Finance reported a theft of $6.04 million from its Lazy Summer depositors. The incident occurred due to a capped-for-removal Ark still being counted in the vault’s value. This allowed a donated stale asset to inflate the share price, ultimately draining real liquidity from the platform.
Addresses in this incident
| Address | Chain | Role | Check |
|---|---|---|---|
| 0x7BF716167B48CF527725722C6d79494b45B3BDCa | ETH | mentioned in coverage | Check live |
| 0x0514F827C129C16418a0933E03C99A6AF982FC61 | ETH | mentioned in coverage | Check live |
| 0x46E09c4D4d20C0474598b4d2fFDd08bdf416eBa7 | ETH | mentioned in coverage | Check live |
Roles are attributed to the source that stated them. Addresses without an attributed role are listed because coverage mentioned them, not because we assign them a part in the incident.