
Huma Finance suffered a $101,400 loss after attackers exploited outdated Polygon V1 BaseCreditPool contracts by manipulating flawed account validation logic. The breach drained over 82,000 USDC from one pool and smaller amounts from others, but newer Solana-based V2 systems remained secure. This incident highlights risks in maintaining legacy DeFi infrastructure, where dormant contracts with residual permissions can be exploited, emphasizing the need for protocols to retire old contracts and simplify infrastructure to protect market confidence.