DeFi protocol INK Finance loses $140K in treasury breach via whitelist spoofing attack

INK Finance, a DeFi protocol on Polygon, suffered a $140,000 loss after attackers exploited weaknesses in its treasury whitelist verification by spoofing an approved contract. The breach highlights growing risks in DeFi treasury authorization systems, which attackers increasingly target to bypass security and access concentrated reserves. Despite the relatively small financial impact, such repeated low-value exploits erode user confidence and reveal operational security gaps in DeFi infrastructure, signaling a need for stronger permission controls as the ecosystem grows.