Blockaid flagged an active exploit targeting Summer.fi in 2026, with reports saying about $6 million in DAI was drained.