Haedal Reports $915,179 Loss in Vault Security Incident, Pledges Full User Compensation

Foresight News reports that Haedal, a capital efficiency protocol on Sui, released a post-mortem analysis of its Vault security incident. The total direct loss is estimated at approximately $915,179, and Haedal stated it will cover all user losses in full, with affected users to receive complete compensation.

According to the report, the root cause was a hidden cross-version logic flaw in a Vault contract upgrade deployed in late 2025. After the new software package release, the legacy entry point was not forcibly deprecated and remained callable. The attacker exploited the old deposit path to over-mint Vault LP shares and redeemed underlying assets. While all versions and upgrades passed audits, the issue went undetected in individual reviews. Haedal confirmed the issue is isolated to Vault only, with other products and assets unaffected. The team is developing a fix and will conduct re-audits before restoration.