MetaSea's redeemPosition function overpaid SEA yield from a shared distributor without blocking just-in-time openings and redemptions in the same block. An attacker used Aave flash loans to atomically deposit USDT into the settlement adapter, redeem disproportionately large SEA amounts (17-27M vs 1.2M input), and sell the SEA back for USDT. Running 8 identical attacks back-to-back, the attacker extracted $110K aggregate across multiple blocks.