Ajna Exploit: $775,400 Drained and No Pause Button in the DeFi Lending Protocol

If you have funds sitting in the DeFi lending protocol Ajna v2, withdraw them now. The development team itself called for exactly that on August 29, 2026 at 04:58 UTC: withdraw all quote tokens, repay outstanding loans and stop every further interaction with the protocol. Between August 28 and 29, roughly $775,400 drained out of seven pools on the Ethereum blockchain. Measured by the sum, this is a small incident. Measured by what it reveals about a particular way of building DeFi protocols, it is among the most instructive of this summer. The reason lies in the construction. Ajna v2 is built to be immutable: no governance body, no upgrade path, no administrator key that could halt the contract. A security update while the protocol runs is therefore technically ruled out. The only party that can stop the outflow is the users, by taking their capital out. The team's call is consequently not one precaution among others. It is the only available response. The Ajna exploit at a glance: $775,400 from seven Ethereum pools A DeFi lending protocol is a set of smart contracts through which users can lend crypto assets and borrow against posted collateral, with no bank or company in between....