Lien Finance Exploited for $542K in USDC
Lien Finance suffered an exploit resulting in a loss of approximately $542,000. The attack involved a validation flaw in a smart contract function.
On July 24, 2026, Lien Finance, a DeFi structured products protocol on Ethereum, was exploited. The attacker took advantage of a validation flaw in the exchangeEquivalentBonds function of the BondMakerCollateralizedEth contract, which lacked necessary multiset integrity checks.
This vulnerability allowed the attacker to mint unbacked bond tokens, leading to the draining of around $542,000 USDC through OTC pools.
Sources
- Source reportrestates another report