Revert Lend's Aerodrome Lend vault on Base was exploited on January 29-30, 2026 for $50,101 when missing validation allowed withdrawal of collateral that was still backing an active loan.

Revert Finance’s newly launched Aerodrome Lend vault on Base was exploited for $50,101. The attacker used a flash loan from Morpho to mint an Aerodrome concentrated liquidity NFT, deposited it as collateral, borrowed USDC, and then exploited a missing safety check in the GaugeManager contract. This allowed unstaking and withdrawing all liquidity from the debt-backed position, leaving the vault with a worthless NFT shell. A second attacker replicated it shortly after. User funds were safe; losses were mostly from Revert’s own seeded USDC. The team disabled deposits and published a post-mortem.