Udon Finance’s lending pool was exploited through a vulnerability in its withdrawal function that allowed an attacker to extract funds without proper authorization. The team confirmed that the stolen assets remained on Chromia and offered the attacker a 10% bounty in exchange for returning the remaining 90%. The precise technical mechanism and total loss were not disclosed