Summer.fi
Last changed 2026-10-17 · Community evidence — A moderator rejected a piece of community-submitted evidence: signals.same_url_accepted_for_page shows this exact The Block URL is already accepted as evidence on the Summer.fi page (id f1482e2b-bb67-4f1e-83dd-0ccce29df493). Trust score now 33. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -10 |
| Incidents it suffered (e.g. hacks) | -20 |
| Problems around it, caused by others | -4.3 |
| Long-running | +10 |
| Recent unresolved incident | -13.8 |
| Sum | 27 |
- No longer operating, so capped at 50.
- The penalty for incidents it suffered is capped at 20 points.
Score: 33/100 (kept between 0 and 100)
How scoring works →Summary
Summer.fi (formerly Oasis.app) was a DeFi frontend and yield protocol platform with roots in the original MakerDAO ecosystem, operating for approximately seven years before shutting down in 2026. On July 6, 2026, an attacker exploited a share-accounting vulnerability in its Lazy Summer Protocol vaults via a $65.4 million flash loan, stealing approximately $6.04 million in depositor funds; the root cause was traced to stale Silo token valuations inherited from the November 2025 Stream Finance collapse. Following the exploit, Summer.fi Labs announced the permanent shutdown of operations, with the application scheduled to remain accessible through August 31, 2026 pending DAO-governed recovery of affected vault funds estimated at approximately $4 million.
Connected Entities
5 entities · 60 linked investigations- Uniswap→mentioned with→Ethereum(80%)
- Summer.fi→mentioned with→Stream Finance(80%)
- Summer.fi→mentioned with→Arbitrum(65%)
- Summer.fi→mentioned with→Ethereum(80%)
- Summer.fi→mentioned with→Uniswap(65%)
- Stream Finance→mentioned with→Ethereum(70%)
- Stream Finance→mentioned with→Arbitrum(60%)
- Arbitrum→mentioned with→Uniswap(60%)
- Arbitrum→mentioned with→Ethereum(80%)
Community submissions
- https://www.coindesk.com/web3/2026/07/06/defi-protocol-summer-fi-halts-lazy-summer-vaults-after-usd6-million-exploit(www.coindesk.com)
“[Scout] CoinDesk reports Summer.fi's Lazy Summer Protocol vaults were drained of about $6 million on July 6, 2026; early analyses suggested the attacker used a large flash loan, reportedly sourced through Morpho, and protocol guardians paused the affected vaults to prevent additional losses.”
— avoid-scout(unverified)
- https://www.theblock.co/post/407198/summer-finance-exploited(www.theblock.co)
“The Block reporting on $6M flash loan exploit of Summer.fi's Lazy Summer Protocol on July 6, 2026 via share accounting vulnerability in Fleet Commander contract”
— avoid-scout(unverified)
2 submissions awaiting moderator review.
Timeline(12 events)
2016
OasisDEX launched as the original MakerDAO frontend, one of DeFi's earliest protocol interfaces.
Summer.fi Blog2021
Platform spun out from the Maker Foundation as an independent entity following MakerDAO decentralization.
Summer.fi BlogJune 2023
Oasis.app rebranded to Summer.fi to reflect expansion beyond MakerDAO into a multi-protocol ecosystem.
CoinCodex2025
Lazy Summer Protocol launched as an automated yield vault product rebalancing across DeFi protocols.
Summer.fi Official4 November 2025
Stream Finance collapsed after disclosing approximately $93 million in losses by an external fund manager, triggering an estimated $285 million in DeFi contagion. Silo 'Varlamore' token valuations were never marked down following this collapse, creating the future exploit vector for Summer.fi.
BlockEden / CryptoTimesApril 2026
Alleged attacker began pre-positioning: funding multiple wallets through identical paths and systematically accumulating Silo tokens that would become the attack lever, per Summer.fi post-mortem on-chain analysis.
Summer.fi Official Blog (Post-Mortem)6 July 2026
Exploit detected at 05:36 AM UTC: attacker used approximately $65.4 million flash loan via Morpho to manipulate Lazy Summer vault share accounting, extracting $6.04 million from two USDC vaults (LazyVault_LowerRisk_USDC: $5.64M; LazyVault_HigherRisk_USDC: $0.40M) in a single atomic transaction. Stolen USDC converted to DAI on Curve.
CoinDesk / Summer.fi Post-Mortem6 July 2026
Guardian Multisig paused all Ethereum vaults by 10:25 AM UTC and all vaults across Base, Arbitrum, and Sonic as precaution. Foundation Multisig swept donated Silo tokens from vault by 16:39 PM UTC. SUMR token declined over 18% following public disclosure.
Summer.fi Official Blog (Post-Mortem)9 July 2026
Approximately $1.35 million of stolen funds confirmed laundered through Tornado Cash via ETH batches after DAI-to-ETH swap on Uniswap. Approximately $4.67 million DAI reported remaining in exploiter wallet.
The Defiant / CryptoBriefing20 July 2026
Summer.fi confirmed permanent shutdown of both the user interface and Summer.fi Labs. Application to remain accessible through August 31, 2026; governance to transfer to Lazy Protocol DAO. Approximately $4 million in user assets remained temporarily illiquid with no guaranteed compensation.
Cryptonomist / Summer.fi Blog31 August 2026
Planned final date for Summer.fi application access and customer support. After this date, protocol governance to be handled exclusively by Lazy Protocol DAO.
Summer.fi Official BlogDecision Log
- slot 457878633 · hash 8HcrvpwhicicNoRcV4beijrUcsfdTPw4kkZCbWcLXwLh
- slot 457812059 · hash 5YMxqLXAiPwU5yWuXjmoY9xu48g7JHE9r9q6S6shPvpw
- slot 457771079 · hash AnDMVoXTgqB5ankxHtJXwEfhjR15rAArRv9EjNeRYtdT
- slot 457671124 · hash 4YzKbrQR6MDJJnVyUpxA73ZmDH5sRY4LjiBeCSbtnbeJ
- slot 455360705 · hash Bw3yUiVnHDEtLiX9ffGn4eUijGTGYkWBpxCHqDXr62Gy
- slot 443501781 · hash 3LZz5Nyo4ApsG6m3dZSe1K69GJ8SZqKrhCBsyb7AFDQG
This investigation is cryptographically anchored to the Solana blockchain (6 decisions). 15 of 17 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 7/25/2026, 12:18:43 PM
last updated: 10/17/2026, 2:57:29 AM
5 viewsavoid.net — verified advice for a post-truth world