Huma Finance: Polygon Legacy v1 Contract Suffers Attack Resulting in ~$101.4K USDC Loss, v2 System Unaffected
2026-05-11 15:47
Odaily reports that Huma Finance announced on X that an old v1 contract deployed on Polygon was exploited today, resulting in approximately 101,400 USDC being transferred out. This incident did not affect user fund security, and the related PST system was also unaffected. Currently, only the gradually deprecated old v1 pools are impacted. The Huma v2 system is a complete rewrite deployed on Solana and is not affected by this vulnerability. The team was already in the process of gradually retiring v1 liquidity pools. Following this incident, all v1 contract operations have been fully suspended, and the migration closure process is being accelerated.
