$1.7 Million Notional Finance Escrow Contract Hack Exposes DeFi Security Risks

A potential exploit of Notional Finance's escrow contract has resulted in an estimated $1.7 million loss, according to blockchain security monitor Specter and PeckShieldAlert.

The suspected drain occurred just after midnight UTC on September 4, 2026, when approximately $1.73 million in DAI and USDC was moved from the escrow contract to a related address, which then transferred the funds to Tornado Cash, a cryptocurrency mixing service.

Notional Finance's escrow contract may have been exploited through an unknown vulnerability or unauthorized access. The incident highlights ongoing security risks surrounding DeFi infrastructure, particularly contracts that remain operational or hold assets even when not the primary focus of a protocol's user interface.