HypurrFi discloses the "rounding error" vulnerability in the early version of Aave V3 and has suspended new lending and borrowing for the XAUT0 and UBTC markets

By: rootdata|2026/03/06 11:44:09

0

Share

copy

HyperEVM's native non-custodial lending protocol HypurrFi stated on platform X that there is a "rounding error" vulnerability in versions prior to Aave V3 3.5. Under specific conditions, an attacker could extract underlying tokens by repeatedly executing supply/extract and borrow/repay loop operations.

The affected markets are XAUT0 and UBTC in HypurrFi Pooled. Currently, user funds are not at risk. To ensure safety, related markets have suspended new supply and lending operations, while withdrawal and repayment functions remain operational, and other markets are running normally. HypurrFi added that it quickly identified the issue on-chain through its internal monitoring system and promptly froze the affected markets. They are also collaborating with other Aave deployers and security researchers to address the issue and have invited other Aave fork projects to reach out for more security information.

-- Price

You may also like

The arrival of the Web 3.0 era: A review of Hong Kong court rulings on digital assets

The arrival of the Web 3.0 era: A review of Hong Kong court rulings on digital assets

Hong Kong judiciary landmark: The court officially recognizes cryptocurrency as legal property and introduces the "tokenized injunction" to track and freeze involved funds, comprehensively upgrading the protection of digital asset investors.

Track Markets At a Glance: New WEEX Price Widgets for iOS & Android

Track Markets At a Glance: New WEEX Price Widgets for iOS & Android

To streamline your market data access, WEEX has officially launched "Market Watchlist" desktop widgets

The billion-dollar lesson: The focus of DeFi security is shifting from code to operational governance

The billion-dollar lesson: The focus of DeFi security is shifting from code to operational governance

Warning of nearly $1 billion loss in DeFi: Security pain points have shifted from code vulnerabilities to permissions and operations. Introducing TradFi bank-level risk control and AI defenses is the way to balance openness and security.

A Brief Analysis of Stablecoin Licenses and On-Chain Funding

A Brief Analysis of Stablecoin Licenses and On-Chain Funding

Hong Kong accelerates the layout of digital finance, providing a panoramic analysis of the evolution of three major on-chain financial forms: central bank digital currency, deposit tokens, and stablecoins, along with future opportunities.

BVNK Founder: Three Stages of Stablecoin Development

BVNK Founder: Three Stages of Stablecoin Development

Once payments become faster, cheaper, and globally interconnected, stablecoins will not just open up a new market, but a new realm with boundaries that are not yet visible today.

The truth about Trump's son's Bitcoin game: he made a staggering $100 million while retail investors lost $500 million

The truth about Trump's son's Bitcoin game: he made a staggering $100 million while retail investors lost $500 million

The Trump family has a family skill: to exaggerate and make something sound bigger than it actually is.

What Is Futures Trading? Hours, Platforms, and How to Start Trade Futures(2026 Guide)

What Is Futures Trading? Hours, Platforms, and How to Start Trade Futures(2026 Guide)

Learn how to start futures trading, understand trading hours, and choose the best futures trading platform. Includes real data, strategies, and ways to maximize returns with rebates.

The Rise of Composable RWA

The Rise of Composable RWA

27 billion RWA funds are undergoing a major reshuffle: U.S. Treasury bonds are "cooling off," while high-yield credit assets are quietly dominating the DeFi lending market with permissionless designs. This article reveals the explosive logic behind composable RWA.

MAGA Up 350% in 24 Hours, PEPE Up 46% in One Day: Which Memecoins Are Next in 2026?

MAGA Up 350% in 24 Hours, PEPE Up 46% in One Day: Which Memecoins Are Next in 2026?

MAGA +350% in 24hrs. PEPE +46% in one day. RAVE +4,500% then -90%. In 2026's memecoin market, the gains are real. So are the traps? Here's how to tell the difference before you buy.

RCD Espanyol vs Real Madrid: Can the Pericos Delay the Inevitable?

RCD Espanyol vs Real Madrid: Can the Pericos Delay the Inevitable?

RCD Espanyol vs Real Madrid lineups, standings, and stats for May 3, 2026. Real Madrid visits RCDE Stadium as Barcelona closes in on the LALIGA title. Full preview inside.

MegaETH goes live with an FDV exceeding 2 billion USD. Which ecological projects are worth paying attention to?

MegaETH goes live with an FDV exceeding 2 billion USD. Which ecological projects are worth paying attention to?

The financing and team backgrounds of many projects in the MegaETH ecosystem are rich, making it the most prosperous ecosystem among unlaunched public chains, and it is currently the focus of attention for profit-seekers.

Dialogue with "Wood Sister" Cathie Wood: The next bull market is about to arrive

Dialogue with "Wood Sister" Cathie Wood: The next bull market is about to arrive

The correlation coefficient between gold and Bitcoin is only 0.14. In the past two cycles, gold started before Bitcoin, and this time is no different.

Can prediction markets win the competition for perpetual contracts?

Can prediction markets win the competition for perpetual contracts?

Polymarket and Kalshi have entered the perpetual contract arena. In the face of Hyperliquid's "cross-margin" dimensional reduction attack, can the prediction market break the curse of loss and turn the tide?

Who is trading on Trade.xyz?

Who is trading on Trade.xyz?

A Polymarket user supported nearly half of Trade.xyz's "active addresses" with 34,000 wallets, yet contributed less than 1% of the trading volume. The real support for the market comes from market-making institutions like Jump, Selini, and Wintermute, as well as a group of directional traders crossi...

Binance quietly placed a bet on a leading large model company

Binance quietly placed a bet on a leading large model company

In the past year, YZi Labs has significantly accelerated its investments in the AI field, from educational agents to physical robots, and then to large models, with crypto capital and AI technology rapidly integrating.

Best Crypto Discord Server 2026: Why Jacob’s Crypto Clan Is Gaining Massive Attention

Best Crypto Discord Server 2026: Why Jacob’s Crypto Clan Is Gaining Massive Attention

Jacob’s Crypto Clan has grown into one of the most active crypto Discord communities, with over 45K members and continuing to expand. This rapid growth reflects strong demand for structured trading insights and real-time collaboration.

Tom Lee Buying ETH: Why Wall Street’s Loudest Ethereum Bull Keeps Doubling Down

Tom Lee Buying ETH: Why Wall Street’s Loudest Ethereum Bull Keeps Doubling Down

Tom Lee keeps buying ETH through every dip, every drawdown, and every moment of market doubt. Inside the strategy that's turning Ethereum into a treasury asset — and what it signals for the rest of the market.

Stripe Sessions 2026: AI Agent, Global Payments, and Invisible Crypto Infrastructure

Stripe Sessions 2026: AI Agent, Global Payments, and Invisible Crypto Infrastructure

Stablecoins have finally begun to enter the real business world, but this time, the main character may not be exchanges, wallets, or public chains, but Stripe. It encapsulates KYC, wallets, gas, compliance, and settlement, allowing businesses to access on-chain assets just like using regular payment...

The arrival of the Web 3.0 era: A review of Hong Kong court rulings on digital assets

Hong Kong judiciary landmark: The court officially recognizes cryptocurrency as legal property and introduces the "tokenized injunction" to track and freeze involved funds, comprehensively upgrading the protection of digital asset investors.

Track Markets At a Glance: New WEEX Price Widgets for iOS & Android

To streamline your market data access, WEEX has officially launched "Market Watchlist" desktop widgets

The billion-dollar lesson: The focus of DeFi security is shifting from code to operational governance

Warning of nearly $1 billion loss in DeFi: Security pain points have shifted from code vulnerabilities to permissions and operations. Introducing TradFi bank-level risk control and AI defenses is the way to balance openness and security.

A Brief Analysis of Stablecoin Licenses and On-Chain Funding

Hong Kong accelerates the layout of digital finance, providing a panoramic analysis of the evolution of three major on-chain financial forms: central bank digital currency, deposit tokens, and stablecoins, along with future opportunities.

BVNK Founder: Three Stages of Stablecoin Development

Once payments become faster, cheaper, and globally interconnected, stablecoins will not just open up a new market, but a new realm with boundaries that are not yet visible today.

The truth about Trump's son's Bitcoin game: he made a staggering $100 million while retail investors lost $500 million

The Trump family has a family skill: to exaggerate and make something sound bigger than it actually is.

Contents

Popular coins

Latest Crypto News

02:42

Williams: The sustained inflation above the target is a key focus for the central bank

According to Jinshi reports, Federal Reserve's Williams stated that inflation remaining persistently above the target is clearly a focus of concern for central bank officials.

02:42

Data: If BTC falls below $76,244, the cumulative long position liquidation intensity on major CEX will reach $2.518 billion

According to Coinglass data, if BTC falls below $76,244, the cumulative long liquidation intensity on mainstream CEX will reach $2.518 billion. Conversely, if BTC breaks above $83,898, the cumulative short liquidation intensity on mainstream CEX will reach $2.446 billion.

02:42

Data: If ETH falls below $2,245, the cumulative long liquidation intensity on major CEXs will reach $1.375 billion

According to Coinglass data, if ETH falls below $2,245, the cumulative long liquidation intensity on mainstream CEX will reach $1.375 billion. Conversely, if ETH breaks above $2,479, the cumulative short liquidation intensity on mainstream CEX will reach $1.228 billion.

01:42

ASTEROID's market value briefly surpassed 180 million USD, with a daily increase of over 43%

According to GMGN data, the market value of the ETH chain meme coin ASTEROID briefly rose above $180 million, currently reported at about $177 million, with a daily increase of over 43%. Previously, trader Ansem posted on the X platform indicating that he was considering closing his ETH position and...

01:42

Williams: The Federal Reserve's dual mandate faces rising risks

According to Jinshi reports, Federal Reserve's Williams stated that the risks to the Federal Reserve's dual mandate have increased, and the economy is facing unusual circumstances.