{"investigation":{"slug":"summer-finance-lazy-summer-protocol","entity_name":"Summer Finance (Lazy Summer Protocol)","trust_score":28,"severity_base":null,"score_modifier":0,"confidence":0.82,"status":"draft","content_type":"investigation","summary":"Summer.fi (formerly Oasis.app) was a multi-protocol DeFi yield platform that launched the Lazy Summer Protocol in 2025 as an AI-powered automated yield optimizer. On July 6, 2026, an attacker exploited a vault NAV accounting flaw to extract approximately $6.04 million from Ethereum-based USDC vaults, routing stolen funds through Tornado Cash. The exploit led the Summer.fi Labs company to announce a wind-down of operations by August 31, 2026, with the Lazy Summer DAO retaining custody of on-chain vault contracts for ongoing user withdrawals.","sections":[{"content":"Summer.fi began as Oasis.app, a front-end lending and borrowing interface for MakerDAO, developed out of the Maker Foundation. Following the decentralization of the Maker Foundation, Oasis.app was spun out as an independent entity in 2021 under the leadership of Chris Bradbury, who became CEO. In June 2023, the platform rebranded to Summer.fi to reflect its expansion beyond Maker-centric products into a multi-protocol DeFi ecosystem encompassing lending, borrowing, and yield generation. The Lazy Summer Protocol was introduced in 2025 as an AI-assisted yield optimizer that automatically routes deposits across lending markets including Aave and Morpho to seek higher risk-adjusted returns. The SUMR governance token became transferable and began trading via Aerodrome Ignition on Base on January 21, 2026. At its peak, Lazy Summer Protocol had approximately $22 million in total value locked on Ethereum mainnet prior to the July 2026 exploit, according to data cited by The Block.","heading":"Protocol Overview and History","sources":[{"url":"https://www.binance.com/en/feed/post/963279","name":"Shaping DeFi's Horizon: a Conversation With Chris Bradbury, CEO of Summer.fi","type":"news_article","credibility":2},{"url":"https://blog.summer.fi/aerodrome-ignition-x-space-recap-sumr-trading-goes-live/","name":"Aerodrome Ignition X Space Recap: SUMR Trading Goes Live","type":"official","credibility":2},{"url":"https://www.theblock.co/post/407198/summer-finance-exploited","name":"DeFi protocol Summer Finance exploited for $6 million — The Block","type":"news_article","credibility":2}],"severity":"low"},{"content":"On July 6, 2026, an attacker extracted approximately $6.04 million from two Lazy Summer Protocol USDC vaults on Ethereum mainnet in a single atomic transaction. The exploit was first flagged by blockchain security firm Blockaid, with PeckShield and CertiK also reporting suspicious activity. The root cause was an architectural gap in the vault's net asset value (NAV) accounting system: when an underlying strategy module (referred to as an ARK) had its deposit cap set to zero as part of a decommissioning process, it was removed from accepting new allocations but continued to be included in NAV calculations. The attacker accumulated Silo 'Varlamore USDC Growth' vault tokens — which had become nearly worthless following the November 2025 Stream Finance collapse — and donated these stale-valued tokens into the capped ARK, causing the vault to overstate its total assets by approximately 9.5%. The attacker then used an approximately $65 million flash loan to deposit USDC into the vaults and redeem shares at the artificially inflated price, realizing approximately $6.1 million in profit before repaying the flash loan. The entire attack executed in approximately 36 seconds. According to BA Labs' risk curator retrospective published on the Summer community forum, address funding and accumulation of Silo Varlamore tokens began no later than late March or early April 2026, indicating the attack was planned approximately three months in advance rather than being opportunistic. The attacker subsequently routed funds through Tornado Cash, significantly reducing the likelihood of on-chain recovery.","heading":"July 2026 Exploit: NAV Accounting Manipulation","sources":[{"url":"https://www.coindesk.com/web3/2026/07/06/defi-protocol-summer-fi-halts-lazy-summer-vaults-after-usd6-million-exploit","name":"DeFi protocol Summer.fi halts Lazy Summer vaults after $6 million exploit — CoinDesk","type":"news_article","credibility":1},{"url":"https://www.theblock.co/post/407198/summer-finance-exploited","name":"DeFi protocol Summer Finance exploited for $6 million — The Block","type":"news_article","credibility":2},{"url":"https://forum.summer.fi/t/lazy-summer-protocol-exploit-july-6-2026-ba-labs-risk-curator-retrospective/856","name":"Lazy Summer Protocol Exploit, July 6 2026: BA Labs Risk Curator Retrospective — Summer Community Forum","type":"community_report","credibility":2},{"url":"https://www.cryptotimes.io/2026/07/08/6m-lazy-summer-exploit-traces-back-to-novembers-stream-finance-collapse/","name":"$6M Lazy Summer Exploit Traces Back to November's Stream Finance Collapse — CryptoTimes","type":"news_article","credibility":2},{"url":"https://amlcrypto.io/blog/kak-iz-lazy-protocol-viveli-6-millionov","name":"Lazy Summer, Fast Hands: How $6M Left Lazy Summer Protocol in 36 Seconds — AMLCrypto","type":"research","credibility":2},{"url":"https://www.bankless.com/read/news/lazy-summer-protocol-drained-of-6m-in-vault-price-exploit","name":"Lazy Summer Protocol Drained of $6M in Vault Price Exploit — Bankless","type":"news_article","credibility":2}],"severity":"critical"},{"content":"The precondition for the Lazy Summer exploit was the collapse of Stream Finance in November 2025, during which Stream disclosed a $93 million loss from an external fund manager. Stream's xUSD token crashed approximately 77%, and the event exposed roughly $285 million in interconnected debt across protocols including Euler, Silo, and Morpho. The Silo 'Varlamore USDC Growth' vault tokens that Lazy Summer's decommissioned ARK continued to count at near-original valuation were among the assets that had lost most of their real value in the aftermath of Stream Finance's collapse. These tokens retained stale on-chain price data for approximately eight months, from November 2025 through the July 2026 exploit. The attacker identified and exploited the mismatch between the protocol's internal accounting and the true market value of these tokens. BA Labs, the risk curator for the Lazy Summer Protocol at the time, noted that the architectural rule requiring full ARK removal — not merely zero-cap — from NAV accounting was absent from decommissioning procedures.","heading":"Connection to Stream Finance Collapse","sources":[{"url":"https://www.cryptotimes.io/2026/07/08/6m-lazy-summer-exploit-traces-back-to-novembers-stream-finance-collapse/","name":"$6M Lazy Summer Exploit Traces Back to November's Stream Finance Collapse — CryptoTimes","type":"news_article","credibility":2},{"url":"https://forum.summer.fi/t/lazy-summer-protocol-exploit-july-6-2026-ba-labs-risk-curator-retrospective/856","name":"Lazy Summer Protocol Exploit, July 6 2026: BA Labs Risk Curator Retrospective — Summer Community Forum","type":"community_report","credibility":2}],"severity":"high"},{"content":"On the morning of the exploit, BA Labs identified the $6 million drain at approximately 05:44 UTC. By 06:37 UTC, the Guardian Multisig — a narrowly scoped, community-controlled multisig established under SIP0.2 for emergency use — executed the first transaction to pause deposits. By 06:46–06:47 UTC, deposit caps were set to zero across all affected fleets. The Guardian Module paused vaults on Ethereum, Base, Arbitrum, and Sonic networks as a precautionary measure. The official Summer.fi post-mortem blog post attributed the root cause to a missing decommissioning step rather than a contract code bug. BA Labs published its own retrospective on the Summer community forum and subsequently announced its resignation as risk curator for the Lazy Summer Protocol effective immediately following the exploit. The SUMR governance token fell by over 18% in the immediate aftermath of the incident.","heading":"Protocol Response and Incident Management","sources":[{"url":"https://blog.summer.fi/lazy-summer-usdc-vault-exploit-post-mortem-what-happened-and-what-comes-next/","name":"Lazy Summer USDC Vault Exploit Post-Mortem — Summer.fi blog","type":"official","credibility":2},{"url":"https://forum.summer.fi/t/lazy-summer-protocol-exploit-july-6-2026-ba-labs-risk-curator-retrospective/856","name":"Lazy Summer Protocol Exploit, July 6 2026: BA Labs Risk Curator Retrospective — Summer Community Forum","type":"community_report","credibility":2},{"url":"https://forum.summer.fi/t/ba-labs-stepping-down-as-risk-curator-for-the-lazy-summer-protocol/899","name":"[BA Labs] Stepping Down as Risk Curator for the Lazy Summer Protocol — Summer Community Forum","type":"community_report","credibility":2},{"url":"https://beincrypto.com/summer-fi-exploit-6-million-sumr/","name":"Hackers Reportedly Drain $6 Million From DeFi Protocol Summer.fi — BeInCrypto","type":"news_article","credibility":2}],"severity":"high"},{"content":"Summer.fi announced the wind-down of the Summer.fi Labs company following the exploit, citing that the $6.04 million loss erased the financial runway necessary to rebuild and continue operations. The Summer.fi application remained live through August 31, 2026 to allow users to manage positions. The team clarified that the Lazy Summer Protocol itself — governed by the Lazy Summer DAO — does not shut down with the company. Vault contracts remain on-chain, unpaused, and permissionless; user shares remain redeemable regardless of what happens to the Summer.fi front-end. The Lazy Summer DAO worked through vault cleanup following the exploit and restored all vaults to withdrawal availability, as confirmed in an official blog post titled 'All Lazy Summer Vaults are now available for withdrawal.' Stolen funds were routed through Tornado Cash by the attacker, substantially limiting recovery prospects. Any compensation for the approximately $6 million in affected depositor funds would require Lazy Summer DAO governance approval; no formal compensation program had been publicly announced as of the available reporting.","heading":"Company Wind-Down and User Fund Access","sources":[{"url":"https://blog.summer.fi/sunsetting-summer-fi-and-the-labs-company/","name":"Sunsetting Summer.fi and the Labs Company — Summer.fi blog","type":"official","credibility":2},{"url":"https://blog.summer.fi/all-lazy-summer-vaults-are-now-available-for-withdrawal/","name":"All Lazy Summer Vaults are now available for withdrawal — Summer.fi blog","type":"official","credibility":2},{"url":"https://finance.yahoo.com/markets/crypto/articles/6-million-vault-exploit-forces-040337051.html","name":"$6 Million Vault Exploit Forces DeFi Platform Summer.fi to Wind Down — Yahoo Finance","type":"news_article","credibility":1},{"url":"https://www.bitget.com/news/detail/12560605509769","name":"Summer.fi shuts down after exploit — Lazy Summer DAO to resume withdrawals — Bitget News","type":"news_article","credibility":2},{"url":"https://www.mexc.com/news/1198957","name":"Summer.fi Hacked: $6M Stolen as Funds Vanish Into Tornado Cash — MEXC News","type":"news_article","credibility":2}],"severity":"high"},{"content":"Prior to the exploit, Summer.fi maintained publicly available smart contract audits through ChainSecurity and Prototech Labs, and operated an active bug bounty program on Immunefi. All audit reports were listed in the Summer.fi Knowledge Base. However, the July 2026 exploit was not attributable to a flaw in audited contract code itself, but to a gap in operational decommissioning procedures — specifically, the failure to fully remove a deprecated vault module from NAV accounting when setting its deposit cap to zero. BA Labs' retrospective noted that this gap meant 'a cap of zero does not eliminate all residual exposure while an ARK remains listed,' a class of risk that standard code audits may not have been scoped to catch. An independent analysis published on proofofaudits.com following the incident examined the NAV invariant as a class of audit test that should be applied to yield-routing protocols.","heading":"Security Posture and Audit History","sources":[{"url":"https://docs.summer.fi/summer.fi/audits","name":"Audits — Summer.fi Knowledge Base","type":"official","credibility":2},{"url":"https://forum.summer.fi/t/lazy-summer-protocol-exploit-july-6-2026-ba-labs-risk-curator-retrospective/856","name":"Lazy Summer Protocol Exploit, July 6 2026: BA Labs Risk Curator Retrospective — Summer Community Forum","type":"community_report","credibility":2},{"url":"https://paragraph.com/@proofofaudits/the-nav-invariant-auditors-should-test-after-the-lazy-summer-incident","name":"The NAV Invariant Auditors Should Test After the Lazy Summer Incident — proofofaudits","type":"research","credibility":2}],"severity":"medium"},{"content":"The SUMR token was introduced as a non-transferable governance token for the Lazy Summer Protocol before becoming freely transferable on January 21, 2026, when it began trading via Aerodrome Ignition on Base. SUMR holders participate in Lazy Summer DAO governance, which controls treasury fees generated by protocol activity. Stakers received dual rewards in SUMR and USDC. The token fell over 18% immediately following the July 6, 2026 exploit announcement. As of the Summer.fi wind-down, the Lazy Summer DAO retains governance authority over the on-chain vault infrastructure, including any future decisions regarding depositor compensation from the affected USDC vaults.","heading":"SUMR Token and Governance","sources":[{"url":"https://blog.summer.fi/introducing-sumr-token/","name":"Say Hello to $SUMR — Summer.fi blog","type":"official","credibility":2},{"url":"https://blog.summer.fi/aerodrome-ignition-x-space-recap-sumr-trading-goes-live/","name":"Aerodrome Ignition X Space Recap: SUMR Trading Goes Live — Summer.fi blog","type":"official","credibility":2},{"url":"https://phemex.com/academy/summerfi-exploit-freezes-lazy-summer-vaults","name":"Summer.fi $6M Exploit Freezes Lazy Summer Vaults — SUMR Falls 18% — Phemex","type":"news_article","credibility":2}],"severity":"medium"}],"timeline":[{"date":"2018-01-01","event":"Chris Bradbury joins the Maker Foundation as product manager, begins work on Oasis.app as a frontend for MakerDAO.","source":"Binance Feed interview with Chris Bradbury","source_url":"https://www.binance.com/en/feed/post/963279"},{"date":"2021-06-01","event":"Oasis.app spun out as an independent entity following Maker Foundation decentralization; Chris Bradbury becomes CEO.","source":"Binance Feed interview with Chris Bradbury","source_url":"https://www.binance.com/en/feed/post/963279"},{"date":"2023-06-01","event":"Oasis.app rebrands to Summer.fi to reflect multi-protocol DeFi expansion.","source":"Binance Feed interview with Chris Bradbury","source_url":"https://www.binance.com/en/feed/post/963279"},{"date":"2025-11-01","event":"Stream Finance discloses a $93 million loss; its xUSD token crashes 77%, leaving Silo Varlamore vault tokens with stale on-chain valuations that persist for months.","source":"$6M Lazy Summer Exploit Traces Back to November's Stream Finance Collapse — CryptoTimes","source_url":"https://www.cryptotimes.io/2026/07/08/6m-lazy-summer-exploit-traces-back-to-novembers-stream-finance-collapse/"},{"date":"2026-01-21","event":"SUMR token becomes transferable and begins trading on Aerodrome Ignition on Base.","source":"Aerodrome Ignition X Space Recap — Summer.fi blog","source_url":"https://blog.summer.fi/aerodrome-ignition-x-space-recap-sumr-trading-goes-live/"},{"date":"2026-03-01","event":"Attacker begins accumulating mispriced Silo Varlamore tokens and funding exploit wallets, approximately three months before the attack.","source":"BA Labs Risk Curator Retrospective — Summer Community Forum","source_url":"https://forum.summer.fi/t/lazy-summer-protocol-exploit-july-6-2026-ba-labs-risk-curator-retrospective/856"},{"date":"2026-07-06","event":"Attacker uses a ~$65 million flash loan to manipulate NAV accounting in two Lazy Summer USDC vaults, extracting approximately $6.04 million in a single atomic transaction lasting approximately 36 seconds. Blockaid first alerts; BA Labs confirms at 05:44 UTC. Guardian Multisig pauses deposits by 06:37 UTC. Stolen funds subsequently routed through Tornado Cash.","source":"CoinDesk; BA Labs Risk Curator Retrospective","source_url":"https://www.coindesk.com/web3/2026/07/06/defi-protocol-summer-fi-halts-lazy-summer-vaults-after-usd6-million-exploit"},{"date":"2026-07-06","event":"SUMR token drops over 18% following exploit announcement; all Lazy Summer vaults paused across Ethereum, Base, Arbitrum, and Sonic networks.","source":"Summer.fi $6M Exploit Freezes Lazy Summer Vaults — Phemex","source_url":"https://phemex.com/academy/summerfi-exploit-freezes-lazy-summer-vaults"},{"date":"2026-07-08","event":"Connection between exploit and the November 2025 Stream Finance collapse publicly reported.","source":"$6M Lazy Summer Exploit Traces Back to November's Stream Finance Collapse — CryptoTimes","source_url":"https://www.cryptotimes.io/2026/07/08/6m-lazy-summer-exploit-traces-back-to-novembers-stream-finance-collapse/"},{"date":"2026-07-20","event":"Summer.fi announces wind-down of the Labs company; app to remain live through August 31, 2026. BA Labs resigns as risk curator for the Lazy Summer Protocol.","source":"SummerFi DeFi Shutdown — The Cryptonomist; BA Labs stepping down post — Summer Forum","source_url":"https://en.cryptonomist.ch/2026/07/20/summerfi-defi-shutdown/"},{"date":"2026-08-31","event":"Summer.fi application officially ceases operations; governance and vault infrastructure transfers to the Lazy Summer DAO. All Lazy Summer Vaults confirmed available for withdrawal.","source":"All Lazy Summer Vaults are now available for withdrawal — Summer.fi blog","source_url":"https://blog.summer.fi/all-lazy-summer-vaults-are-now-available-for-withdrawal/"}],"sources_used":[{"url":"https://www.coindesk.com/web3/2026/07/06/defi-protocol-summer-fi-halts-lazy-summer-vaults-after-usd6-million-exploit","name":"DeFi protocol Summer.fi halts Lazy Summer vaults after $6 million exploit — CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260921085230/https://www.coindesk.com/web3/2026/07/06/defi-protocol-summer-fi-halts-lazy-summer-vaults-after-usd6-million-exploit","credibility":1,"archive_timestamp":"2026-09-21T08:52:30+00:00"},{"url":"https://www.theblock.co/post/407198/summer-finance-exploited","name":"DeFi protocol Summer Finance exploited for $6 million — The Block","type":"news_article","archive_url":"http://web.archive.org/web/20260706170700/https://www.theblock.co/post/407198/summer-finance-exploited","credibility":2,"archive_timestamp":"2026-07-06T17:07:00+00:00"},{"url":"https://forum.summer.fi/t/lazy-summer-protocol-exploit-july-6-2026-ba-labs-risk-curator-retrospective/856","name":"Lazy Summer Protocol Exploit, July 6 2026: BA Labs Risk Curator Retrospective — Summer Community Forum","type":"community_report","archive_url":"https://web.archive.org/web/20260927133607/https://forum.summer.fi/t/lazy-summer-protocol-exploit-july-6-2026-ba-labs-risk-curator-retrospective/856","credibility":2,"archive_timestamp":"2026-09-27T13:36:07+00:00"},{"url":"https://www.cryptotimes.io/2026/07/08/6m-lazy-summer-exploit-traces-back-to-novembers-stream-finance-collapse/","name":"$6M Lazy Summer Exploit Traces Back to November's Stream Finance Collapse — CryptoTimes","type":"news_article","archive_url":"http://web.archive.org/web/20260916133453/https://www.cryptotimes.io/2026/07/08/6m-lazy-summer-exploit-traces-back-to-novembers-stream-finance-collapse/","credibility":2,"archive_timestamp":"2026-09-16T13:34:53+00:00"},{"url":"https://blog.summer.fi/lazy-summer-usdc-vault-exploit-post-mortem-what-happened-and-what-comes-next/","name":"Lazy Summer USDC Vault Exploit Post-Mortem — Summer.fi blog","type":"official","archive_url":"http://web.archive.org/web/20260919234946/https://blog.summer.fi/lazy-summer-usdc-vault-exploit-post-mortem-what-happened-and-what-comes-next/","credibility":2,"archive_timestamp":"2026-09-19T23:49:46+00:00"},{"url":"https://blog.summer.fi/sunsetting-summer-fi-and-the-labs-company/","name":"Sunsetting Summer.fi and the Labs Company — Summer.fi blog","type":"official","archive_url":"http://web.archive.org/web/20260919234946/https://blog.summer.fi/sunsetting-summer-fi-and-the-labs-company/","credibility":2,"archive_timestamp":"2026-09-19T23:49:46+00:00"},{"url":"https://blog.summer.fi/all-lazy-summer-vaults-are-now-available-for-withdrawal/","name":"All Lazy Summer Vaults are now available for withdrawal — Summer.fi blog","type":"official","archive_url":"http://web.archive.org/web/20260809140637/https://blog.summer.fi/all-lazy-summer-vaults-are-now-available-for-withdrawal/","credibility":2,"archive_timestamp":"2026-08-09T14:06:37+00:00"},{"url":"https://finance.yahoo.com/markets/crypto/articles/6-million-vault-exploit-forces-040337051.html","name":"$6 Million Vault Exploit Forces DeFi Platform Summer.fi to Wind Down — Yahoo Finance","type":"news_article","archive_url":"http://web.archive.org/web/20260716045851/https://finance.yahoo.com/markets/crypto/articles/6-million-vault-exploit-forces-040337051.html","credibility":1,"archive_timestamp":"2026-07-16T04:58:51+00:00"},{"url":"https://forum.summer.fi/t/ba-labs-stepping-down-as-risk-curator-for-the-lazy-summer-protocol/899","name":"[BA Labs] Stepping Down as Risk Curator for the Lazy Summer Protocol — Summer Community Forum","type":"community_report","archive_url":"https://web.archive.org/web/20260927222038/https://forum.summer.fi/t/ba-labs-stepping-down-as-risk-curator-for-the-lazy-summer-protocol/899","credibility":2,"archive_timestamp":"2026-09-27T22:20:38+00:00"},{"url":"https://www.bankless.com/read/news/lazy-summer-protocol-drained-of-6m-in-vault-price-exploit","name":"Lazy Summer Protocol Drained of $6M in Vault Price Exploit — Bankless","type":"news_article","archive_url":"http://web.archive.org/web/20260809184615/https://www.bankless.com/read/news/lazy-summer-protocol-drained-of-6m-in-vault-price-exploit","credibility":2,"archive_timestamp":"2026-08-09T18:46:15+00:00"},{"url":"https://amlcrypto.io/blog/kak-iz-lazy-protocol-viveli-6-millionov","name":"Lazy Summer, Fast Hands: How $6M Left Lazy Summer Protocol in 36 Seconds — AMLCrypto","type":"research","archive_url":"http://web.archive.org/web/20260821002759/https://amlcrypto.io/blog/kak-iz-lazy-protocol-viveli-6-millionov","credibility":2,"archive_timestamp":"2026-08-21T00:27:59+00:00"},{"url":"https://www.bitget.com/news/detail/12560605509769","name":"Summer.fi shuts down after exploit — Lazy Summer DAO to resume withdrawals — Bitget News","type":"news_article","archive_url":null,"credibility":2,"archive_timestamp":null},{"url":"https://en.cryptonomist.ch/2026/07/20/summerfi-defi-shutdown/","name":"SummerFi DeFi Shutdown After Lazy Summer Protocol Exploit — The Cryptonomist","type":"news_article","archive_url":"http://web.archive.org/web/20260727095812/https://en.cryptonomist.ch/2026/07/20/summerfi-defi-shutdown/","credibility":2,"archive_timestamp":"2026-07-27T09:58:12+00:00"},{"url":"https://phemex.com/academy/summerfi-exploit-freezes-lazy-summer-vaults","name":"Summer.fi $6M Exploit Freezes Lazy Summer Vaults — SUMR Falls 18% — Phemex","type":"news_article","archive_url":"http://web.archive.org/web/20260817145009/https://phemex.com/academy/summerfi-exploit-freezes-lazy-summer-vaults","credibility":2,"archive_timestamp":"2026-08-17T14:50:09+00:00"},{"url":"https://blog.summer.fi/aerodrome-ignition-x-space-recap-sumr-trading-goes-live/","name":"Aerodrome Ignition X Space Recap: SUMR Trading Goes Live — Summer.fi blog","type":"official","archive_url":"http://web.archive.org/web/20260421200210/https://blog.summer.fi/aerodrome-ignition-x-space-recap-sumr-trading-goes-live/","credibility":2,"archive_timestamp":"2026-04-21T20:02:10+00:00"},{"url":"https://www.binance.com/en/feed/post/963279","name":"Shaping DeFi's Horizon: a Conversation With Chris Bradbury, CEO of Summer.fi — Binance Feed","type":"news_article","archive_url":null,"credibility":2,"archive_timestamp":null},{"url":"https://docs.summer.fi/summer.fi/audits","name":"Audits — Summer.fi Knowledge Base","type":"official","archive_url":"http://web.archive.org/web/20260419091516/https://docs.summer.fi/summer.fi/audits","credibility":2,"archive_timestamp":"2026-04-19T09:15:16+00:00"},{"url":"https://paragraph.com/@proofofaudits/the-nav-invariant-auditors-should-test-after-the-lazy-summer-incident","name":"The NAV Invariant Auditors Should Test After the Lazy Summer Incident — proofofaudits","type":"research","archive_url":"https://web.archive.org/web/20260927133611/https://paragraph.com/@proofofaudits/the-nav-invariant-auditors-should-test-after-the-lazy-summer-incident","credibility":2,"archive_timestamp":"2026-09-27T13:36:11+00:00"},{"url":"https://forum.summer.fi/t/lazy-summer-governance-recap-july-2026/909","name":"Lazy Summer Governance Recap [July 2026] — Summer Community Forum","type":"community_report","archive_url":"http://web.archive.org/web/20260827222051/https://forum.summer.fi/t/lazy-summer-governance-recap-july-2026/909","credibility":2,"archive_timestamp":"2026-08-27T22:20:51+00:00"},{"url":"https://blog.summer.fi/lazy-summer-and-sumr-a-protocol-with-a-business-model-not-just-a-token/","name":"Lazy Summer Protocol & $SUMR: A Protocol with Real Utility — Summer.fi blog","type":"official","archive_url":"http://web.archive.org/web/20260521135327/https://blog.summer.fi/lazy-summer-and-sumr-a-protocol-with-a-business-model-not-just-a-token/","credibility":2,"archive_timestamp":"2026-05-21T13:53:27+00:00"}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-09-27T12:07:50.996337+00:00","updated_at":"2026-09-27T22:22:12.600203+00:00"}}