According to CoinMeta, a tranchepool related to Valinor Digital, Oatfi, and Fence Finance is suspected of having been attacked, resulting in a loss of approximately $1.013 million. The root cause was that during the UTC daily cut-off, the settlement logic mistakenly considered a planned principal repayment as received and deducted it from the unpaid principal, when in fact no repayment was made. As a result, the attacker was able to withdraw the same funds repeatedly using the same calldata.