Lazy Summer Hack Analysis: Stale-Asset Donation and ERC-4626 Share-Price Manipulation

On July 6, 2026, the Lazy Summer Protocol suffered an exploit on Ethereum mainnet that resulted in approximately $6.04 million in losses across two USDC vaults. The attacker used flash-loan liquidity,