Solana Lending Protocol DeFiTuna Loses About 569,600 USDC in Attack

Solana lending protocol DeFiTuna lost about 569,600 USDC in an attack yesterday, according to Web3 security firm CertiK. According to Foresight News, the attacker set up a nearly illiquid fake TUNA/USDC pool in advance and routed USDC borrowed from DeFiTuna through Jupiter into the pool. Because only a very small amount of TUNA was returned, the protocol's position valuation rounded down to zero due to precision truncation and incorrectly classified the position as healthy. The attacker then used prearranged limit order positions to drain the funds. The stolen funds have since been split and moved to two addresses, which hold about $383,000 and $184,000 respectively.