---
title: "Aurellion Suffers Attack Leading to Loss of USDC"
type: "News"
locale: "en"
url: "https://longbridge.com/en/news/286094780.md"
description: "Aurellion has suffered a security breach, resulting in the loss of approximately 455,003 USDC. The attack exploited a vulnerability in the SafeOwnable Facet's initialize(address) function, allowing the attacker to reinitialize the contract and override owner permissions. The attacker used the diamondCut function to inject a malicious Facet and transferred USDC assets from authorized users through a malicious pullERC20 function. The affected contract address is 0x0adc63e71b035d5c7fdb1b4593999fa1f296f1b2, and the attacker's address is 0x9f49591a3bf95b49cd8d9477b4481ce9da68d5ca."
datetime: "2026-05-12T11:53:54.000Z"
locales:
  - [zh-CN](https://longbridge.com/zh-CN/news/286094780.md)
  - [en](https://longbridge.com/en/news/286094780.md)
  - [zh-HK](https://longbridge.com/zh-HK/news/286094780.md)
generator: "portal-rs"
---

# Aurellion Suffers Attack Leading to Loss of USDC

Aurellion has been attacked, resulting in a loss of approximately 455,003 USDC, according to Odaily. The security breach was traced to a vulnerability in the SafeOwnable Facet's initialize(address) function, which lacked adequate protection. The Diamond contract failed to update the \_initialized version slot correctly when setting the owner, allowing the attacker to reinitialize the contract and override owner permissions. The attacker subsequently used the diamondCut function to inject a malicious Facet and transferred authorized users' USDC assets through a malicious pullERC20 function, completing the theft. The affected contract address is 0x0adc63e71b035d5c7fdb1b4593999fa1f296f1b2, with the vulnerability Facet located at 0x3ca79c1cf29b8d19f7c643bb6e6bc9c49762e70f. The attacker's address is 0x9f49591a3bf95b49cd8d9477b4481ce9da68d5ca. Currently, the attacker has seized ownership of the Diamond contract and transferred USDC from several authorized addresses, including 0x2e933518..., 0xa90714a1..., and 0xeced2d37....

### Related Stocks

- [AURE.US](https://longbridge.com/en/quote/AURE.US.md)

## Related News & Research

- [Tiger Gold issues 25,619,351 units after special warrants are deemed exercised](https://longbridge.com/en/news/298136109.md)
- [Verizon outage sparks a fresh wave of complaints nationwide](https://longbridge.com/en/news/298022434.md)
- [FingerMotion prices registered direct offering at $0.24 per share with pre-funded warrants](https://longbridge.com/en/news/298075887.md)
- [Spider AF Report Reveals $25.3B Global First Half Ad Fraud Losses](https://longbridge.com/en/news/297796253.md)
- [REG - Smiths Group PLC - Holding(s) in Company](https://longbridge.com/en/news/297769770.md)

---
> **Disclaimer: This article is for reference only and does not constitute any investment advice.**