ACryptoS Vault Exploit Drains $665K; Protocol Shuts Down

The exploit's mechanics are the real story: a missing input validation check let an attacker mint nearly all vault shares for a token-level pittance — a share-accounting failure rather than a key compromise or oracle manipulation. That distinction matters because the same pattern can sit unnoticed in other aggregator vaults that fork or reuse similar logic. The affected users span 77 vaults on five chains, and the protocol's decision to cease operations rather than patch means the wind-down, not a fix, is now the operative event. Whether withdrawals proceed cleanly, and whether comparable validation gaps surface elsewhere, is the open question.