← Editorial Ethereum

RedSonic Vault Loses 9.25 ETH in Flash Loan Exploit

A permissionless asset registration flaw in Ethereum's RedSonic Vault enabled an attacker to extract 9.25 ETH using a flash loan.

· -6

Ethereum-based RedSonic Vault was drained of approximately 9.25 ETH in a single-transaction flash loan attack, according to security firm ExVulSec.

The attacker secured 1,139 WETH from Balancer to fund the exploit without requiring upfront personal capital. The attack took advantage of a pricing vulnerability where the vault's share valuation function calculated prices directly from raw stETH balances rather than tracking minting and burning events.

According to ExVulSec, the vault's asset registration function lacked access restrictions, allowing the attacker to register stETH as a secondary share class. This allowed the same underlying collateral to be double-counted. After depositing 1,130 ETH to claim nearly 99% of outstanding shares, the attacker inflated the value and repaid the flash loan within a self-destructing smart contract.

How this piece reads Sell tone -6
Site call on Ethereum Buy score 56.7

These two are not the same thing, and one does not produce the other. The left is how this single article reads, from its tone alone. The right is the site’s own call on the asset, from indicators and analysis. Press tone feeds no score and no signal: on the only corpus this site has measured, daily tone tracked the move that had already happened and showed no measurable link with what followed.

More on Ethereum All pieces →

Rewritten from the headline, the teaser and the one-line summary the qualification step produced — that is all the material there is, and nothing is added to it. The source link is kept on file so any item can be checked, and is not published here.