Question 1

Huma Finance 漏洞事件中损失了多少？

Accepted Answer

Approximately $101,400 in USDC and USDC.e got drained from Huma Finance's deprecated V1 BaseCreditPool contracts on Polygon on May 11, 2026. Blockaid and Huma Finance both confirmed the amount.

Question 2

Huma Finance 的用户资金是否安全？

Accepted Answer

Huma Finance stated that no user funds are at risk. Its current V2 system on Solana is a complete rewrite. The V1 vulnerability doesn't touch it.

Question 3

漏洞是如何产生的？

Accepted Answer

A logic flaw in the `refreshAccount()` function within the V1 BaseCreditPool contracts improperly upgraded an account's status without adequate validation. That let the attacker bypass authorization checks and withdraw funds, according to Blockaid and The Crypto Times.

Huma Finance

Huma Finance在Polygon漏洞中损失10.1万美元，与Ink遭入侵同日

一份犀利简报。
每天。

Huma Finance

Huma Finance在Polygon漏洞中损失10.1万美元，与Ink遭入侵同日

一份犀利简报。每天。

一份犀利简报。
每天。