Lien Finance Hit by $542K USDC Loss Due to Logic Gap Exploit

Lien Finance, an Ethereum-based structured products protocol, was hit by hackers on July 24, 2026, resulting in a loss of approximately $542,144 USDC.

The attack occurred when an attacker manipulated pricing inside the protocol's GeneralizedDotc bond-to-ERC20 OTC pools. The attacker deployed an orchestration contract and registered a new bond group with a maliciously crafted payoff function, bypassing the intended burn logic and draining real liquidity from live pools.

This is not Lien Finance's first encounter with such an issue, as in September 2020, a whitehat coalition rescued approximately $10 million from its original BondMaker contract after identifying a bug. However, this time the exploit was carried out by a malicious actor rather than intercepted by researchers.