Cozy Finance Exploit Drains $170,000 From DeFi Insurer for a 2nd Time
Blockchain security firm Blockaid flagged a Cozy Finance exploit on Optimism early Monday. The attacker drained roughly $170,000 and bridged the funds out within 13 minutes.
Cozy Finance runs protection markets that let users buy cover against DeFi failures. An earlier Optimism attack cost the protocol about $427,000 in August 2025.
Attacker Bridged the Money Out in 13 Minutes
The exploit transaction landed at 05:43 UTC on Monday, according to OP Mainnet explorer data. It moved about 163,326 USDC.e out of the protocol across 63 token transfers.
Meanwhile, the same transaction burned roughly 1.6 million Cozy PToken (CPT). The attacker then approved a token and pushed the funds through a bridge at 05:56 UTC.
That exit came before Blockaid published its alert. Explorer records show no further movement from the wallet since.
The attacker also prepared well ahead. Records show the attack contract went live on September 2, five days before the drain. The wallet drew its first funds from a Relay solver.
… Continue reading the full article at the original source below.
