On December 30, 2023, Locus Finance vaults were exploited when an attacker compromised a developer's private key during a CTO transition. Without multisig security, the attacker used administrative access to drain $320,964 from vaults.