On January 15-17, 2023 Midas Capital's Jarvis Polygon pool was exploited via a flashloan-enabled reentrancy attack targeting a recently-added collateral token, draining $660,000 of MATIC. Midas reached out with a bug-bounty offer and contributed $1,000 USDC weekly for 52 weeks toward affected protocols and users.

Due to the read-only-reentrancy problem (read-only-reentrancy) when interacting with the Curve liquidity pool, the cross-chain money market solution Midas Capital was attacked and exploited in the Polygon liquidity pool of the stablecoin protocol Jarvis, and has lost $650,000.