Digital Asset
Intelligence
Security Incident · Optimism Ecosystem

Cozy Finance Smart Contract Vulnerability: $160.00K Reported Loss

·Historical incident record

Incident Overview

DeFi protection protocol Cozy Finance on Optimism was exploited for about $160,000. The attacker first bought PTokens in the Aave v2 and Curve protection markets, then submitted undisputed YES answers to the UMA Optimistic Oracle. The trigger did not independently verify a real Aave/Curve hack, and PToken payout eligibility was not tied to a pre-proposal holder snapshot. After the markets moved to TRIGGERED, the attacker burned PTokens and claimed USDC.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2096881310237426062 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 457,878
  2. Incident date
    Attack methodFlash Loan Attack
    Reported loss$ 20,000,000
  3. Incident date
    Attack methodContract Vulnerability
    Reported lossNot disclosed
  4. Incident date
    Attack methodPrivate Key Leakage
    Reported loss$ 26,414
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 46,070