Sirio Finance, the first lending protocol on Hedera, exploited for $2M on February 1, 2025 via flashloan attack. Specific technical details of the vulnerability are not publicly available.