the DeFi protocol Convergence has been attacked and has lost about $210,000. The hackers minted about 58 million CVG, which was then exchanged for 60 WETH and 15,900 crvFRAX. The vulnerability is part of the CvxRewardDistributor contract, which does not validate (untrusted) user input to claim rewards.