Huma Finance reports $101K exploit of deprecated V1 contracts on Polygon
Crypto Briefing
Huma Finance experienced a $101,000 exploit on its deprecated Polygon V1 contracts, while user deposits and the V2 platform remain unaffected.Summary
Huma Finance confirmed a $101,000 security breach involving its deprecated V1 BaseCreditPool contracts on Polygon, caused by a logic error in credit-lifecycle management. The incident, which occurred on May 11, allowed unauthorized drawdowns, specifically impacting protocol and pool owner fees. The company clarified that user deposits, PayFi Strategy Tokens, and the newer V2 system on Solana were not affected by the exploit. Security analysts identified the incident as a preventable access-control vulnerability, highlighting the systemic risks associated with leaving legacy smart contracts active on-chain after protocol migrations.
(Source：Crypto Briefing)