Blockaid Reports Avalanche Vault Linked to Valinor Digital Attacked, Losing $1.01 Million

What happened

Blockaid said a Tranche Vault on Avalanche linked to Valinor Digital was attacked, with about $1.01 million withdrawn. The attacker used a flash loan to mint an inflated amount of tranche shares and then redeemed the vault's remaining USDC in about two transactions.

Confirmed

Global impact / market context

The attack shows how borrowed money, called a flash loan, can be used to trick a vault's share pricing and drain customer USDC. Holders of similar Avalanche vaults may face losses, and builders may need stronger checks on how shares are priced and minted.

Analyst inference

The event is a security failure at one Avalanche vault tied to Valinor Digital, not a problem with Avalanche itself. Still, repeated vault exploits can make savers more cautious about putting USDC into smaller yield products, which affects where stablecoin cash sits.

Analyst inference

What to watch

1. Watch whether the attack, still ongoing at publication, is stopped and whether the withdrawn $1.01 million is recovered or traced. Confirmed
2. Watch for any plan from Valinor Digital or Avalanche teams to pause similar vaults or change share pricing rules that made the inflated minting possible. Proposed
3. Watch whether other Avalanche vaults holding USDC see withdrawals if savers worry the same flash loan trick could work against their deposits. Analyst inference

Affected assets

• USDC — USD Coin
• AVAX — Avalanche

Evidence

• binance.com