Woofun AI reports that Summer.fi's Lazy Summer Protocol incurred a loss of approximately $6.1 million due to a single transaction attack. The exploit did not involve a standard ERC-4626 donation mechanism; instead, the attacker leveraged the trust relationship between the parent vault and an allocation strategy to inject counterfeit assets into the vault's accounting records.