Minterest

An attacker flash loaned USDY tokens, triggering a reentrancy attack during the transfer fallback function. Exchange rate updates executed immediately after borrow operations, allowing the attacker to manipulate rates and liquidate user positions for mETH and WETH.