ACryptoS Vaults Exploited for $665K, Protocol Shuts Down

Cointime update: DeFi yield aggregator ACryptoS said its vaults were exploited for about $665,000 across 77 vaults on five chains, prompting it to disable deposits while keeping withdrawals open. The attacker needed only a tiny token deposit to mint most of a vault’s shares because of missing input validation. Stolen funds have been moved through multiple cross-chain protocols, and ACryptoS has offered a 10% bounty for their return. The project has ceased operations and urged users to withdraw assets.