Reddio RedSonic Vault Share Inflation
An attacker abused a permissionless asset-registration function and a Balancer flash loan to double-count collateral in Reddio's RedSonic Vault, draining 9.25 ETH (about $23,000) on Ethereum.
Loss
23.0K
USD
Year × Attack dossier
Flash Loan Attack attacks in 2026
Total losses
$11.8M
4 incidents
Allbridge Core Flash-Loan Pool Manipulation
A flash-loan attack skewed Allbridge Core's stablecoin pool ratio on Solana, letting the attacker withdraw liquidity at manipulated rates for about $1.65 million.
Loss1.6MUSDSummer.fi Lazy Summer Vault Accounting Exploit
A flash-loan attacker manipulated share accounting in Summer.fi's Lazy Summer USDC vault, redeeming inflated assets to drain about $6 million on Ethereum.
Loss6.0MUSDMakina MachineShareOracle Drain
$4.13M extracted from Makina's DUSD/USDC Curve pool via flash-loan oracle manipulation against MachineShareOracle; white-hat talks recovered 89% in a week.
Loss4.1MUSD