A user of the Venus Protocol borrowing and lending platform was successfully phished by an attacker who gained access to their account and drained $13.5 million in stablecoins and wBETH. The user signed a malicious transaction, approving the attacker’s address for token withdrawals.Venus paused the protocol as they investigated the theft. The project then proposed a vote to force liquidation of the attacker’s wallet and recover the stolen funds.

Total loss estimated at $2,100,000.