Sumer.Money Hack

TOTAL LOST $350K
Low Flash Loan Attacks base

What happened

Quick Summary

The Summer Money protocol was exploited via a flash loan attack, resulting in losses of approximately $350,000 USD.

Details of the Exploit

The Summer Money protocol was exploited on the Base L2 blockchain, resulting in losses of approximately $350,000 USD. The attacker utilized an unverified contract for the attack, executing a flash loan of 150 ETH and 645,000 USDC to deposit into Summer ETH and USDC wrapper contracts. This created an opportunity to withdraw an additional 10 wrapped Coinbase Ethereum and 310,000 USDC tokens.

Block Data Reference

Exploiter:

https://basescan.org/address/0xbb344544…5e7e77

Flashloan tx:

https://basescan.org/tx/0x619c44af…3a4661

Exploiter contract:

https://basescan.org/address/0x13d27a2d…fe9fe7

Case & protocol details

Classification Borrowing and Lending / Reentrancy
Protocol Type Lending
Smart Contract Language Solidity
Official Website app.sumer.money/
Protocol Twitter/X @SumerMoney

Security review history

Evidence & learning

Attack pattern

Compare incidents →
Flash Loan Attacks Reentrancy

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Jaypeggerz $18K
Bacon Protocol $1.0M

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes