On October 24, 2022, QuickSwap's Market XYZ lending market on Polygon was exploited for $220K via a read-only reentrancy vulnerability in the Curve LP Oracle. An attacker used a flash loan to manipulate spot prices, inflating collateral values to drain assets from the market. The exploit affected LDO, MATIC, and staked MATIC tokens, leading QuickSwap to shut down its lending service.