A Hacker Borrowed $65 Million, Gave It All Back, and Kept $6 Million

Summer.fi's LazyVault protocol was drained of $6 million in DAI after an attacker exploited a share-accounting flaw — using a $65.4M flash loan to execute the entire heist in a single transaction.