DefiTuna Lending on Solana exploited for $580K on July 16, 2026. Attackers created a highly illiquid TUNA/USDC pool and routed borrowed USDC through it. The negligible swap output caused position value to round to zero, bypassing the solvency check.

The Solana-based DeFi protocol DefiTuna's lending pools were exploited by an attacker who drained approximately $580K, creating a matching deficit in the USDC lending pool. The attack vector has been identified and patched; the team is investigating and working on fund recovery.