Makina Finance hit by $5M flash-loan exploit on January 20, 2026
On January 20, 2026, Makina Finance suffered a flash-loan exploit that drained about $5 million from its DUSD/USDC Curve pool through oracle manipulation. According to CertiK and TenArmor, the attacker borrowed 280 million USDC at 03:40 UTC, used 170 million USDC to skew the oracle, then traded 110 million USDC and later moved 1,299 ETH. Makina said only DUSD LP positions on Curve were affected and urged withdrawals.