Vault attacked with losses of approximately $665,000, ACryptoS announces shutdown
Odaily: According to ACryptoS monitoring, following a vault exploit, ACryptoS has disabled deposit functionality while withdrawals remain open. ACryptoS's analysis indicates that due to a lack of input validation, an attacker only needed to deposit a very small amount of tokens to mint the vast majority of shares in the vault. The attack affected 77 vaults across 5 chains, with total losses of approximately $665,000. The stolen funds have been transferred through multiple cross-chain protocols. ACryptoS has proposed that the attacker may keep 10% as a bounty if the funds are returned. Additionally, ACryptoS stated that due to being unable to continue maintenance, the project has ceased operations and has asked users to withdraw their assets as soon as possible.
ACryptoS’s vault exploit came from missing input validation, letting an attacker mint most shares with a tiny deposit; the project has shut down and asked users to withdraw, damaging trust in its vaults and similar yield aggregators. This raises withdrawal and security-review risk for comparable DeFi vaults, so ACryptoS and the sector are short-term bearish (weak), with limited systemic impact.