---
title: "Aurellion Suffers Attack Leading to Loss of USDC"
type: "News"
locale: "en"
url: "https://longbridge.com/en/news/286094780.md"
description: "Aurellion has suffered a security breach, resulting in the loss of approximately 455,003 USDC. The attack exploited a vulnerability in the SafeOwnable Facet's initialize(address) function, allowing the attacker to reinitialize the contract and override owner permissions. The attacker used the diamondCut function to inject a malicious Facet and transferred USDC assets from authorized users through a malicious pullERC20 function. The affected contract address is 0x0adc63e71b035d5c7fdb1b4593999fa1f296f1b2, and the attacker's address is 0x9f49591a3bf95b49cd8d9477b4481ce9da68d5ca."
datetime: "2026-05-12T11:53:54.000Z"
locales:
  - [zh-CN](https://longbridge.com/zh-CN/news/286094780.md)
  - [en](https://longbridge.com/en/news/286094780.md)
  - [zh-HK](https://longbridge.com/zh-HK/news/286094780.md)
generator: "portal-rs"
---

# Aurellion Suffers Attack Leading to Loss of USDC

Aurellion has been attacked, resulting in a loss of approximately 455,003 USDC, according to Odaily. The security breach was traced to a vulnerability in the SafeOwnable Facet's initialize(address) function, which lacked adequate protection. The Diamond contract failed to update the \_initialized version slot correctly when setting the owner, allowing the attacker to reinitialize the contract and override owner permissions. The attacker subsequently used the diamondCut function to inject a malicious Facet and transferred authorized users' USDC assets through a malicious pullERC20 function, completing the theft. The affected contract address is 0x0adc63e71b035d5c7fdb1b4593999fa1f296f1b2, with the vulnerability Facet located at 0x3ca79c1cf29b8d19f7c643bb6e6bc9c49762e70f. The attacker's address is 0x9f49591a3bf95b49cd8d9477b4481ce9da68d5ca. Currently, the attacker has seized ownership of the Diamond contract and transferred USDC from several authorized addresses, including 0x2e933518..., 0xa90714a1..., and 0xeced2d37....

### Related Stocks

- [AURE.US](https://longbridge.com/en/quote/AURE.US.md)

## Related News & Research

- [Jensen Huang: Nvidia’s Vera Rubin Platform Turns Electricity Into a $40 Billion Cash Machine](https://longbridge.com/en/news/297688917.md)
- [Verizon outage sparks a fresh wave of complaints nationwide](https://longbridge.com/en/news/298022434.md)
- [How Did BONER Meme Coin Create One of Robinhood's Biggest Stories?](https://longbridge.com/en/news/297668469.md)
- [FingerMotion prices registered direct offering at $0.24 per share with pre-funded warrants](https://longbridge.com/en/news/298075887.md)
- [REG - Pinewood Tech Gp PLC - Exercise of Warrants, Issue of Equity and Rule 2.9](https://longbridge.com/en/news/297927086.md)

---
> **Disclaimer: This article is for reference only and does not constitute any investment advice.**