On June 7, 2022, Equalizer's vault contracts across four chains were exploited via a flawed calculation in getRatioForOneEToken(). The attacker used flash loans to manipulate vault balances and withdraw more assets than entitled. All losses were covered by Equalizer, with no impact to users.