Ajna told users of its v2 lending protocol to withdraw funds, repay loans and stop interacting with the system after identifying abnormal fund flows, while DefiLlama recorded a $775,400 loss from seven Ethereum pools in what it classifies as a liquidation-logic flaw.
The unusual part is the response available to users. Ajna describes its protocol as permissionless and without governance; public reporting says v2 is immutable, so there is no administrator switch to pause the affected contracts or deploy a live fix. The exit notice is therefore the immediate containment step, not simply a general security precaution.
The DefiLlama incident record lists Aug. 28 as the date of the event, labels it “Protocol Logic” and “Liquidation Logic Flaw,” and puts the amount at $775,400. That is the best-supported public loss figure as of Aug. 30; it is not a final accounting from Ajna, a confirmed recovery amount or proof of the attacker’s realised proceeds.
Crypto Times’ incident report says the activity reached pools involving syrupUSDC, wstETH, rETH, cbETH, WBTC, WETH/USDC and sDAI. It attributes the estimate to monitoring firm Defimon. Ajna had not published a technical post-mortem, a count of affected wallets, attacker identities, transaction hashes, a recovery plan or a statement of which remaining pools are safe to use when this report was prepared.
That disclosure gap matters. Users should not read an estimated loss total as a complete map of individual balances, liquidity or recoverability. It also distinguishes this incident from Moonwell’s Base lending-market restriction, where the protocol could impose new borrowing caps while it investigated an oracle-linked event.