Lien Finance Attack Drains 542,144.63 USDC Through Smart Contract Flaw

Decentralized finance protocol Lien Finance was attacked after an attacker used a smart contract vulnerability to mint unsecured bond tokens and steal about 542,144.63 USDC. According to Odaily, the attacker minted a new abnormal BondToken without destroying the corresponding input bond and then exchanged it for USDC through a preauthorized address. The report said the incident stemmed from a verification flaw in the bond token redemption logic, which allowed the attacker to bypass asset collateral constraints and mint unsupported assets.