regarding the ResupplyFi hack, preliminary investigation shows that the ResupplyPair contract uses an empty ERC4626 wrapper as the price oracle.
thus the hacker used only 2 crvUSD to borrow 10M reUSD....
0xffbbd492e0605a8bb6d490c3cd879e87ff60862b0684160d08fd5711e7a872d3