Back to Markets
Crypto▼ Bearish
SummerFi exploit shows AI automation now above smart contract risk
Blockaid detected the exploit on July 6, estimating $6M drained. SummerFi paused vaults. The incident shows the risk of automated keeper agents and layered contract trust.
Continue with
Blockaid said on July 6 that its exploit detection system had identified an ongoing exploit on Summer.fi. The security firm estimated about $6 million had been drained at the time of its alert. The Etherscan transaction shows a successful Ethereum transaction at 05:17:59 UTC on July 6. Summer.fi later said it was aware of the reported exploit and that protocol guardians were pausing all vaults across the Lazy Summer Protocol. The final loss figure and cause remain unsettled until Summer.fi publishes a fuller incident review.
Summer.fi's Lazy Summer protocol uses Lazy Vaults, also called Fleets. These are coordinated contract systems with a Fleet Commander and ARKs. RAFT harvests and compounds rewards. The Fleet Commander manages deposits and withdrawals, and sets allocation. ARKs implement yield strategies.
The protocol's rebalancer adds another layer. Summer.fi says Keeper AI Agents can reallocate assets across ARKs within constraints set through FleetCommander and governance. Those constraints include limits on value movement and frequency.