On October 14, 2021, Indexed Finance's DEFI5 and CC10 pools were drained of $16M via a sophisticated flashloan attack. The attacker used massive flashloans to knock pool balances out of equilibrium, purchased component assets at heavily discounted rates, and executed the entire attack within a single transaction.

Indexed Finance, a passive income agreement, was attacked, and the affected fund pools included DEFI5 and CC10. After the vulnerability was discovered, it triggered protection measures including DEGEN, NFTP, and FFF (including DEFI5 and CC10) fund pools, and was frozen. About half an hour ago, Indexed Finance officially stated that the root cause of the attack has been determined. The two index token fund pools, DEGEN and NFTP, have resumed normal operation, while the FFF pool is still in a frozen state. Officials stated in Discord that the damage caused by this attack was about 16 million U.S. dollars.