Security Analysis Flags Critical Flash Loan Vulnerabilities in Steakhouse Financial Protocol

A security research report dated August 31, 2026, identified multiple high-severity flash loan attack vectors in Steakhouse Financial, a multi-chain yield optimization platform with approximately $3 billion in total value locked. The most critical finding involves the potential for a governance takeover using flash-loan-funded voting power, which could theoretically allow a full protocol drain. Researchers also flagged oracle price manipulation as a high-risk vector, estimating losses of up to 15% of TVL in a single epoch if an attacker moves over $200 million in liquidity on a single AMM. Additional vulnerabilities include a re-entrancy flaw in the vault's deposit and withdrawal logic, where balances are updated after external calls rather than before. The report assigned an overall risk score of 7.4 out of 10 and called for immediate mitigations to the oracle and vault modules, with governance hardening recommended in the next upgrade cycle.