Data leak [loss] $10M+

Tweet by CyversAlerts

2025-02-12 [vendor] zkLend
Primary Source ↗
Financial Loss $9.5M (9,500,000 USD)

Incident Details

The Starknet-based lending platform zkLend was exploited for around $9.5 million. zkLend paused the protocol after the attack was discovered, and began working with various crypto security groups to try to trace the stolen funds and identify the thief. zkLend also sent a message to the attacker, offering a 10% “bounty” and a “release from any and all liability” if they returned 90% of the funds. As of twelve hours after the hack, no reply had been made.

Total loss estimated at $9,500,000.

Technical Details

Initial Attack Vector
Smart contract exploit / hack
Vendor / Product
zkLend

Timeline

  1. 2025-02-12 Breach occurred
  2. 2025-02-12 Publicly disclosed