An attacker compromised a single admin account managing Hypervisor emergency withdraw functions, enabling extraction of 504,845 USD from unpositioned assets awaiting LP placement. The team had not yet migrated to a multisig setup and the attacker lacked full visibility into safeguards, limiting losses. The team restored all withdrawn amounts using treasury funds.

The Visor Finance smart contract, a DeFi liquidity protocol based on Uniswap V3, was withdrawn with 230 ETH in an emergency, and the attacker gained access to an account that manages certain Hypervisor management functions, and then transferred the funds to Tornado.cash.