Huma Finance's older version of its Polygon contract was attacked, resulting in the theft of approximately 101,400 USDC.

CoinFeed reported on May 11 that, according to Blockaid, Huma Finance's deprecated v1 BaseCreditPool contract on Polygon was exploited today, resulting in the transfer of approximately 101,400 USDC and USDC.e. Huma Finance stated that this vulnerability only affected its older v1 contract on Polygon; the v2 Solana system, being completely rewritten, was unaffected. The platform does not hold user funds, and PST tokens are unaffected. The team had already been gradually phasing out all v1 pools and has now completely suspended the v1 contract.