Digital Asset
Intelligence
Security Incident · Polygon Ecosystem

BitBay StableVault Smart Contract Vulnerability: $14.00K Reported Loss

·Source-attributed incident record

Incident Overview

BitBay’s Polygon DAI/USDC vault, UsdcDaiV4Vault, was exploited. The attacker first called reposition() to force the vault’s liquidity to zero, then redeemed only one minimal share. Because _withdraw() sends the contract’s entire token balance when liquidity == 0 instead of the user’s proportional share, about 14,838.47 DAI (roughly $14,000) was drained.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2108399198035202138 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    DoinGud

    Attack methodSmart Contract Vulnerability
    Reported loss$ 35,486
  2. Incident date
    Target

    Allbridge

    Attack methodBridge Logic Flaw
    Reported loss$ 190,000
  3. Incident date
    Target

    Royal.io

    Attack methodSmart Contract Vulnerability
    Reported loss$ 263,000
  4. Incident date
    Attack methodPrice Manipulation
    Reported loss$ 1,280,000
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 18600