Lumi Finance Exploit Results in $270,000 Loss
Lumi Finance experienced a significant exploit leading to substantial financial losses. Attackers exploited a vulnerability in Sodium smart accounts during UserOp validation.
The DeFi protocol Lumi Finance suffered an exploit on July 13, 2026, where attackers took advantage of Sodium smart accounts. These accounts performed token approvals as a side effect during UserOp validation, which was exploited by a malicious Paymaster.
As a result of this exploit, the attackers were able to gain allowances from multiple accounts, draining funds from the protocol. The total loss incurred from this incident is approximately $270,000.