Huma Finance exploit Polygon: $101,000 loss from V1 pools
A Huma Finance exploit Polygon incident has put a familiar DeFi problem back in the spotlight: old contracts can stay dangerous long after a protocol has moved on. Huma Finance said roughly $101,000 was drained from its deprecated V1 BaseCreditPool contracts on Polygon on May 11, but user deposits were not affected. The attacker pulled out 82,316 USDC and 19,075 USDC.e through unauthorized drawdowns, according to the protocols disclosure. Just as important for users, Huma said the losses were limited to pool owner fees and protocol fees, not customer funds. That distinction matters. In crypto, the words “exploit” and “drained” can quickly trigger fears of wider contagion. Here, Huma drew a sharp line between the older Polygon-based system that was hit and the parts of the project still running normally, including PayFi Strategy Token (PST) and Humas V2 deployment on Solana. Huma Finance discloses a $101,000 exploit on Polygon The Huma Finance exploit Polygon users are now parsing traces back to deprecated infrastructure rather than the protocols current core operations. Huma said the affected contracts were the older V1 BaseCreditPool contracts on Polygon, which were already supposed to be out of commission. The total amount drained was approximately $101,000. Broken down, that included 82,316 USDC









