Summer.fi, a decentralized finance protocol that offers automated yield‑optimisation vaults, announced on Thursday that it is temporarily disabling its Lazy Summer vaults. The decision follows a security incident that reportedly allowed an attacker to siphon approximately $6 million worth of assets from the vaults.
The exploit was detected by the platform’s monitoring tools, prompting an immediate freeze of new deposits and withdrawals to prevent further loss. Summer.fi’s development team is conducting a forensic review to pinpoint the vulnerability and assess the full scope of the breach.
In the wake of the incident, the protocol’s native token, SUMR, experienced a sharp decline, falling more than 18% against major stablecoins within hours of the announcement. Market participants cited concerns over the protocol’s security posture and the potential impact on user funds.
Summer.fi’s leadership has pledged to compensate affected users, though the exact mechanism and timeline remain under discussion. The team also indicated that a third‑party audit will be commissioned to validate any remedial measures before the vaults are reopened.
The episode adds to a series of high‑profile DeFi exploits reported in recent months, underscoring the sector’s ongoing challenges with smart‑contract security. Investors and users are advised to monitor further updates from Summer.fi for details on the investigation and any forthcoming remediation steps.