HypurrFi discloses the "rounding error" vulnerability in the early version of Aave V3 and has suspended new lending and borrowing for the XAUT0 and UBTC markets

By: rootdata|2026/03/06 02:48:14
0
Share
copy

HyperEVM's native non-custodial lending protocol HypurrFi stated on platform X that there is a "rounding error" vulnerability in versions prior to Aave V3 3.5. Under specific conditions, an attacker could extract underlying tokens by repeatedly executing supply/extract and borrow/repay loop operations.

The affected markets are XAUT0 and UBTC in HypurrFi Pooled. Currently, user funds are not at risk. To ensure safety, related markets have suspended new supply and lending operations, while withdrawal and repayment functions remain operational, and other markets are running normally. HypurrFi added that it quickly identified the issue on-chain through its internal monitoring system and promptly froze the affected markets. They are also collaborating with other Aave deployers and security researchers to address the issue and have invited other Aave fork projects to reach out for more security information.

-- Price

--

You may also like

Morning News | SK Hynix officially launches the marketing promotion process for its U.S. stock listing; the Central Cyberspace Administration announces the results of the first phase of rectifying AI application chaos, with over 14,000 non-compliant pr...

July 6 Market Important Events Overview

How has Binance's stock business performed in the 30 days since its launch?

Emerging market buying supported the first wave of demand.

Blockchain Capital Partner: AI is rewriting the fundamental unit of labor

The rise of AI is rewriting the basic unit of labor from "positions" and "companies" to "tasks." When programmable labor meets programmable currency, a production line without companies, salary systems, or HR becomes possible for the first time.

Can Open USD support Stripe's ambitions?

Stripe collaborates with multiple parties to launch OUSD, not only challenging the dominance of USDC but also exposing its trillion-dollar ambition to transition from a "payment interface" to a "next-generation funds settlement network."

Founder of Baixing.com: I believe half of the statement that large language models devour everything

The internet has been shouting for so many years about devouring everything. Has it really devoured everything now? Is it the internet that devours everything, or is it the large models that devour everything? Both are devouring, and nothing is left?

A "legal" robbery? Attackers emptied the BonkDAO treasury by buying tickets

Handing over the keys to the vault to a public vote where "anyone can spend money to participate," without sufficient oversight mechanisms, even the most legitimate governance ideals may turn into the most convenient tools for attackers.

Popular coins

Latest Crypto News

Read more
iconiconiconiconiconiconicon
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com