Cozy Finance Exploit Drains $170,000 From DeFi Insurer for a 2nd Time
Blockchain safety agency Blockaid flagged a Cozy Finance exploit on Optimism early Monday. The attacker drained roughly $170,000 and bridged the funds out inside 13 minutes.
Cozy Finance runs safety markets that permit customers purchase cowl in opposition to DeFi failures. An earlier Optimism assault value the protocol about $427,000 in August 2025.
Attacker Bridged the Money Out in 13 Minutes
The exploit transaction landed at 05:43 UTC on Monday, in line with OP Mainnet explorer knowledge. It moved about 163,326 USDC.e out of the protocol throughout 63 token transfers.
Meanwhile, the identical transaction burned roughly 1.6 million Cozy PToken (CPT). The attacker then authorized a token and pushed the funds by means of a bridge at 05:56 UTC.
That exit got here earlier than Blockaid revealed its alert. Explorer data present no additional motion from the pockets since.
The attacker additionally ready properly forward. Records present the assault contract went dwell on September 2, 5 days earlier than the drain. The pockets drew its first funds from a Relay solver.
Blockaid additionally named Cozy Set (CSET) because the abused token contract. That contract stays unverified and nonetheless holds about $4,168 in USDC.e.
Cozy Finance Exploit Repeats a 2025 Failure
This is just not the protocol’s first loss on Optimism. An attacker took about $427,000 in August 2025, safety agency Verichains discovered.
The flaw sat within the withdrawal code, which by no means checked who accomplished a redemption. Cozy Finance now ranks fifth amongst insurance coverage protocols on DefiLlama, holding about $1.3 million.
DefiLlama listed roughly $172,000 on the Optimism facet. Therefore, the attacker seems to have swept near the complete deployment there.
Similar raids maintain touchdown throughout DeFi. Notional Finance lost $1.73 million final week to an integer overflow bug. Days earlier, Full Sail wound down operations after an attacker took roughly $91,000.
Monday introduced a far bigger case as properly. Roughly $320 million in Bitcoin left the Liquid Network, and the actors claimed white hat intentions on-chain.
However, early loss figures typically transfer. Blockaid first sized an August Flow exploit at $9.3 million earlier than the community put the injury close to $410,000.
Blockaid promised extra element because it traces the cash. The sum is small, but a second breach on the identical chain raises more durable questions.
The publish Cozy Finance Exploit Drains $170,000 From DeFi Insurer for a 2nd Time appeared first on BeInCrypto.
