The attacker manipulated the stablecoins prices in Curve , then through an exploit in Harvest Finance smart contracts, he was able to withdraw them at a different rate. Approximately $25M in stablecoins has been withdrawn in BTC. The exploit was done through a flashloan zap, therefore Havest Finance's team didn't have more than 7 minutes to react to it.
- What's next?
Users reportedly noticed that their wallet now have less stablecoins. The price dropped 60% in just couple hours. ⚠️