What happened
A late-March 2026 incident affected GoonFi's v2 WSOL/USDC pool on Solana. Security monitoring records describe an approximately $254,000 loss after a program configuration or logic issue created a pool mispricing. The team reportedly halted the affected program.
Technical root cause
Public reporting identifies a configuration or program-logic issue that caused pool mispricing, but no detailed technical postmortem was available at review time. The precise vulnerable instruction and invariant remain unconfirmed.
How it happened
- The public incident records agree on the affected product and outcome but do not provide a full technical postmortem naming the vulnerable instruction or invariant.
- Available monitoring states that the WSOL/USDC Prop AMM v2 pool became mispriced because of a program configuration or logic error.
- Searchers could then exploit that incorrect quote in atomic Solana transactions to trade at a price the pool should not have offered.
- No more specific root cause has been published.
Protocol details
Classification
Protocol Logic / Pool Mispricing
Protocol Type
DEX
Implementation language
Solidity
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
