
The Solana-based DeFi protocol said it fixed the vulnerability and is investigating recovery after the exploit left its USDC lending pool with a matching deficit and no stated reimbursement plan yet.
DeFiTuna, a decentralized finance protocol on Solana, said an exploit drained about $580,000 from its lending pools and left its USDC lending pool with an equal deficit. The team said it identified and mitigated the attack vector, is still investigating the incident and is trying to recover the funds, with more information to follow. In lending markets, a deficit means the pool's liabilities exceed its assets, leaving depositors exposed if withdrawals outpace available reserves until the shortfall is covered. DeFiTuna combines an automated market maker with concentrated liquidity, on-chain lending and leveraged positions of up to 5x, a structure that can increase complexity where valuation, borrowing and liquidation systems interact. The protocol has not yet said whether it will backstop the USDC pool if recovery efforts fail, leaving users focused on reimbursement, a fuller post-mortem and any third-party security review.