# Post-incident Update: Exploit lazy vault **URL:** \ **Category:** Feeback\ **Created:** [July 18, 2026, 5:32pm UTC](https://forum.summer.fi/t/post-incident-update-exploit-lazy-vault/869 "2026-07-18T17:32:31Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Davids](https://avatars.discourse-cdn.com/v4/letter/d/65b543/32.png) [@Davids](https://forum.summer.fi/u/Davids)\ **Post date:** [July 18, 2026, 5:32pm UTC](https://forum.summer.fi/t/post-incident-update-exploit-lazy-vault/869/1 "2026-07-18T17:32:31Z")
I am a depositor in the USDC Lower Risk Vault that was affected by the recent exploit. Following the incident and the announced shutdown of the protocol, I would appreciate receiving clarification regarding the current status of user funds and the next steps for affected depositors. In particular, I would like to know: - The current status of the affected vault and its remaining assets. - Whether a recovery, reimbursement, or compensation plan is being prepared. - The estimated timeline for any future distributions to affected users. - Whether users need to take any action at this stage. - Where official updates regarding the incident and the liquidation process will be published. As a user directly impacted by the exploit, I would appreciate as much transparency as possible regarding the losses, the recovery efforts, and the expected outcome for depositors. Thank you for your time and I look forward to your response. If it’s possible, i would talk with the team. I don’t know how to get informations. Thanks all. ---
**Author:** ![Yinwa](https://avatars.discourse-cdn.com/v4/letter/y/6f9a4e/32.png) [@Yinwa](https://forum.summer.fi/u/Yinwa)\ **Post date:** [July 19, 2026, 5:40am UTC](https://forum.summer.fi/t/post-incident-update-exploit-lazy-vault/869/2 "2026-07-19T05:40:47Z")
I am in the same boat as the OP and I would also appreciate an update on the situation and recovery, reimbursement, or compensation plan. Very hard to find any info on x, discord or other sources so would appreciate an update, or at least when an update can be expected. Many thanks! ---
**Author:** ![jensei](https://yyz1.discourse-cdn.com/flex009/user_avatar/forum.summer.fi/jensei/32/69_2.png) [@jensei](https://forum.summer.fi/u/jensei)\ **Post date:** [July 20, 2026, 12:45pm UTC](https://forum.summer.fi/t/post-incident-update-exploit-lazy-vault/869/4 "2026-07-20T12:45:29Z")
@Davids & @Yinwa Hello and thank you for reaching out. There are ~13 onchain DAO votes (`queued` atm) that are addressing offboarding of `inactive` arks and `unpause`-ing vaults (that will become `withdraw`-able, once executed). These are focusing on all of the vaults, besides **Ethereum USDC LR and HR**. - **RFC:** [[RFC] Offboard legacy Arks and re-open paused Fleets for withdrawals](https://forum.summer.fi/t/rfc-offboard-legacy-arks-and-re-open-paused-fleets-for-withdrawals/862) - **[SIP2.59]:** [[SIP2.59] Offboard legacy Arks across BA-managed Fleets](https://forum.summer.fi/t/sip2-59-offboard-legacy-arks-across-ba-managed-fleets/866) - **[SIP7.3]:** [[SIP7.3] Offboard legacy Arks across DAO-managed Fleets](https://forum.summer.fi/t/sip7-3-offboard-legacy-arks-across-dao-managed-fleets/867) > _These vaults have not been affected by the exploit and depositors will be able to `withdraw` their funds in full upon successful crosschain execution of above mentioned proposals (~22.07.2026)._ * * * When it comes to the affected vaults (Ethereum USDC LR and HR) - there are two onchain proposals ([SIP1.7] & [SIP1.8]) - recovering ~$4.3M from the paused vaults that are allocated to Syrup, Term Finance & Origin. > These proposals have `passed`, were `executed` on Base; and are awaiting crosschain execution that can occur as early as `9AM UTC, 21.07.2026` on Ethereum Mainnet. - **RFC:** [[RFC] Next steps for exploited USDC Vaults on Ethereum](https://forum.summer.fi/t/rfc-next-steps-for-exploited-usdc-vaults-on-ethereum/855) - **[SIP1.7]:** [[SIP1.7] (July 6th Exploit Followup) USDC Lower Risk (Ethereum) Vault Cleanup and Market Withdrawals](https://forum.summer.fi/t/sip1-7-july-6th-exploit-followup-usdc-lower-risk-ethereum-vault-cleanup-and-market-withdrawals/859) - **[SIP1.8]:** [[SIP1.8] (July 6th Exploit Followup) USDC Higher Risk (Ethereum) Vault Cleanup and Market Withdrawals](https://forum.summer.fi/t/sip1-8-july-6th-exploit-followup-usdc-higher-risk-ethereum-vault-cleanup-and-market-withdrawals/860) This is the first step of recovery. Once executed onchain, followup proposals have to be established to move all recovered funds from the 2 affected vaults to Merkl campaign, where affected depositors will be able to recover ~40% of their deposited value (due to post-incident socialization). Hope this answer your questions.