Alkimiya's SilicaPools contract unsafely downcast shares from uint256 to uint128 in the collateralizedMint function. An attacker used a flash loan to manipulate the truncated shares value, causing the contract to believe it had issued fewer shares than it actually had and allowing redemption of more collateral than deposited.