Attackers exploited Ajna’s internal liquidation accounting across multiple lending pools. Current on-chain analysis shows liquidation operations could be sequenced to extract collateral while returning insufficient quote assets to the pool, including bucketTake, collateral removal, take, and settlement operations