# BitBay Vault Exploit Results in About 14,838.47 Dai Loss

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/28691
Published: 2026-10-09T03:42:24.000Z
Updated: 2026-10-09T03:42:24.000Z
Section: Technology

> A flaw in the withdrawal function transferred the contract’s entire token balance when liquidity reached zero.

An exploit affecting BitBay’s Vault resulted in the loss of about 14,838.47 Dai (DAI).

The vulnerability involved the Vault’s _withdraw() function. When liquidity reached zero, the function transferred the contract’s entire token balance instead of limiting the payout to the user’s proportional share.

The attacker first used reposition() to reduce liquidity to zero. The attacker then redeemed one minimum share unit and withdrew about 14,838.47 DAI.