Huma Finance V1 contract was attacked, resulting in losses exceeding $100,000.

According to a report by crypto.news, Techub News reports that Huma Finance's legacy V1 contract was attacked on the Polygon blockchain, resulting in the theft of approximately $101,400 (USDC and USDC.e). Security firm Blockaid stated that the attackers exploited a vulnerability in the refreshAccount() function to transfer funds from three contract addresses in a single transaction. This attack only affected deprecated V1 liquidity pools; Huma emphasized that its PayFi V2 and PST tokens on the Solana blockchain were unaffected. All remaining V1 contracts are currently suspended, and the V2 system, launched in April of this year, is completely isolated from the vulnerable code.