EasyFi
2021-04-20 • Rekt •
EasyFi lost about $6 million in stablecoins and roughly $53 million in EASY tokens after mnemonic keys tied to an administrative transfer capability were compromised. The excerpt says the attacker did not exploit a smart contract bug; instead, a compromised machine and weak operational controls around a single admin key enabled the theft. The attacker held about 2.98 million EASY tokens, around 30% of supply, creating liquidity and governance risk for the Polygon-based project. The incident matters as an example of how hot-wallet style key exposure, lack of multisig, and no timelock can turn protocol administration into a single point of catastrophic failure.