Hack history / 2026 / Hack or exploit
Secured Finance Lending
Hack or exploit on Sep 5, 2026 · Spot Price Manipulation
IN REVIEWSOURCES DISAGREE ON DATE OR LOSS · 3 SOURCES
Lost
$104K
sources: $72K to $180K
Returned
none listed
as the sources state it
Rank
#1,704
among thefts by dollars lost
What happened
Attackers manipulated the market-unit price used to value lending positions by self-trading both sides of Secured Finance’s order book. getMarketUnitPrice() derived its price from blockTotalAmount / blockTotalFutureValue for orders filled in the current block, allowing attacker-controlled trades to push the reported price near par. The resulting inflated lend position was accepted as collateral, enabling assets to be withdrawn from the lending pool. A block-reliability check did not prevent manipulation performed atomically with flash-loaned liquidity
In review: sources disagree on the loss.
Details
- Date
- Sep 5, 2026
- Kind
- Hack or exploit
- Method
- Spot Price Manipulation
- How in
- Price, oracle and governance
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Related incidents
Moonwell Lending 2026 · Hack or exploit · $8.7M
Surf Lending 2026 · Hack or exploit · undisclosed
DefiTuna Lending 2026 · Hack or exploit · $580K
Fluid Lending 2026 · Hack or exploit · $215K
UdonFi Lending 2026 · Hack or exploit · undisclosed
Surf Lending 2026 · Hack or exploit · undisclosed
DefiTuna Lending 2026 · Hack or exploit · $580K
Fluid Lending 2026 · Hack or exploit · $215K
UdonFi Lending 2026 · Hack or exploit · undisclosed
Cite this page
SwanBluechip, "Secured Finance Lending hack, Sep 5, 2026: $104K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht0b5a94e2d8/ (data as of 2026-10-31).