Keeper AI (Summer.fi)

On 6 July 2026 at 05:17 UTC an exploit drained funds from Summer.fi's Lazy Summer vaults, whose asset rebalancing across vault contracts was handled by Keeper AI agents operating within governance-set constraints. Security firm Blockaid detected the attack while it was in progress and identified the exploit transaction, the exploiter address and the affected contracts. Blockaid estimated roughly $6 million drained at the time of detection. Summer.fi paused all vaults across the Lazy Summer Protocol while it investigated the root cause, with the final loss figure unsettled pending its incident review.