Dough Finance loses $1.8M in flash loan attack

The attacker exploited unvalidated calldata, resulting in 608 ETH being stolen.

Source