An attacker used a $40.5M Morpho flash loan to manipulate BiFi’s idle USDT market. A 36-day accounting gap inflated deposit interest, which was withdrawn and swapped into WETH. An MEV bot front-ran the original attacker and drained 165.6K USDT.
Transaction: 0x756c68055af7a0630aa0b56891ba4de14c56c39cbebe99e47eeb4728f4d6ad14