ValueDefi custom-weighted pools drained on May 7, 2021. Uninitialized contracts lacked the 'initialized = true' flag, allowing attacker to re-initialize, set themselves as operator/owner, and drain vBWAP/BUSD LP tokens via governanceRecoverUnsupported().

DeFi protocol ValueDeFi is suspected of being hacked again after being hacked on the 5th. ValueDeFi reminds users in the community, "All non-50/50 transaction pools of the project have been used. Please stop purchasing gvVALUE and vBSWAP until the project team provides a solution." It was subsequently confirmed that more than 3,000 ETH (approximately 10 million U.S. dollars) were lost.