Cozy Finance exploit (2026-09-07) — attacker addresses
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-15
- Last updated: 2026-10-16
Cozy Finance exploit on EVM, 2026-09-07. DeFiHackLabs summary: CozyFinance - unverified UMA Optimistic Oracle trigger enables unbacked protection-token redemption. Loss as recorded by DeFiHackLabs: ~160,776 USDC.e (~$160K). Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0x003FE7359A4E03C85Ac2f521eC699ED84C7c5ccB — labeled "attacker" (EVM) Sources: https://github.com/SunWeb3Sec/DeFiH…