SlowMist: BitBay suffered an attack, losing approximately $14,000.

Foresight News reports that according to SlowMist monitoring, it detected that BitBay was attacked, with losses of approximately $14,000. The root cause is that its Vault's _withdraw() transfers out the entire token balance in the contract when liquidity == 0, rather than limiting redemption according to the user's share ratio. The attacker lowered liquidity to zero through reposition(), then redeemed 1 minimum share unit and withdrew approximately 14,838.47 DAI.