Flamincome VaultYUSDT Flash Loan NAV Manipulation — $345.9K

On September 16, 2026, an attacker exploited a legacy USDT strategy vault (VaultYUSDT, part of the deprecated Flamingo Finance contract set on Ethereum — distinct from the unrelated Flamingo Finance exploit on Neo N3 in late August). The attacker flash-loaned approximately 18 million USDT via Morpho, then injected a manipulated Curve USDP/3CRV LP position to artificially inflate the vault's share price (NAV). The attacker redeemed vault shares at the inflated rate for significantly more aUSDT from Aave than they were entitled to, repaid the flash loan, and kept the difference — a net profit of $345,902.67. The entire operation occurred within a single atomic transaction.