DeFi platforms Ink and Huma Finance hit by Polygon exploits

Ink Finance lost $140,000 in a Polygon exploit. Huma Finance’s legacy V1 contracts were exploited for $101,400 USDC, but user funds and its V2 system remain unaffected.

Ink Finance suffered a security breach when its Workspace Treasury Proxy on Polygon was exploited, resulting in a loss of approximately $140,000. Blockaid reported the incident, noting that the exploit occurred shortly before their alert. As of now, no technical breakdown or detailed postmortem has been released. The affected contract is crucial, as it manages operational funds and financial controls. There is no confirmed recovery plan or root-cause disclosure yet. Users are urged to follow official channels for updates and to verify any recovery instructions before acting. Separately, Huma Finance’s legacy V1 smart contracts on Polygon were exploited, leading to a loss of about $101,400 USDC. The vulnerability was limited to the older V1 system, which was already being phased out. Huma Finance confirmed that user funds and the PST token were not affected, and its newer V2 system on Solana remains secure. Operations for V1 have been fully suspended, and the platform is accelerating its transition to the new system.