FutureSwap's changePosition collateral accounting was exploited via a large short position opened with an Aave V3 flash loan. The attacker corrupted the protocol's internal stableBalance tracking, enabling withdrawal of far more collateral than deposited, resulting in the loss of $395K in USDC.