FlamingoFinance’s older Flamincome contracts were exploited after an attacker used an approximately $18 million USDT flash loan to manipulate VaultYUSDT’s share price. The attacker staked USDP liquidity-provider tokens into a strategy, then redeemed liquid aUSDT at an inflated rate, generating roughly $345,900 in USDT profit. Blockaid disclosed the attack on September 16, 2026, and listed related addresses and the primary exploit transaction. One identified address held about 0.000005 ETH, had received 0.1 ETH from Tornado Cash roughly two hours before the activity cluster, and carried out four recent operations. FlamingoFinance had not responded to a request for comment at the time of publication. The incident followed separate exploits involving rsETH, Chainflip’s Tron USDT route and Zentra Finance’s ctUSD reserve.