Deprecated Huma Finance contracts on Polygon exploited for $101K due to a logic error, user funds safe.

Huma Finance's old V1 BaseCreditPool contracts on Polygon were exploited for about $101,000 through unauthorized drawdowns caused by a credit-lifecycle logic error. The exploit affected only pool owner and protocol fees, with no impact on user deposits or the newer V2 system on Solana. This incident highlights risks in outdated DeFi contracts that remain active on-chain despite protocol upgrades. Huma Finance has confirmed the security of user assets and continues normal operations on its Solana platform.