On December 10, 2025, Rari Capital Fuse lending pools (dormant after prior $80M+ hacks) were exploited for $2M via unprotected proxy upgrade vulnerability. Attacker hijacked implementation contract to gain admin privileges and enable uncollateralized borrowing.