A tranche vault on the Avalanche network was drained of 1.01 million USDC, leaving no funds available for user withdrawals. According to blockchain security firm Blockaid, an attacker exploited a flash loan to mint inflated tranche shares and redeem the underlying USDC from the vault. It remains unconfirmed whether the vault has been paused or if the vulnerability has been patched following the exploit.