Key Points:
- Starknet’s top lending protocol zkLend hacked, with hackers draining $9.5 million from its smart contracts. The team halted withdrawals and urged users to avoid deposits.
- Security experts suspect the same organization behind the 2023 EraLend hack, which left the zkSync-based protocol almost dead after losing $2.76 million.
- Investigators traced the attacker’s Starknet address (0x04d7…3d3b26) and multiple L1 test addresses, strengthening suspicions of a coordinated hacking group.
According to an analysis by SlowMist founder Cos, the recent zkLend hack is strongly connected to the EraLend exploit in July 2023.
Read more: EraLend Attack Update: 31% Of Stolen Funds Transferred To CEX
zkLend Loses $9.5 Million in Exploit
zkLend, Starknet’s leading staking lending protocol, confirmed a major security breach, resulting in $9.5 million in stolen funds. The protocol addressed the incident in a series of posts on X, stating that its smart contracts had been drained.
“We are aware of the ongoing security incident on zkLend. The team is now investigating and will provide an update when possible. Thank you for your patience.” zkLend announced.
To prevent further losses, the platform suspended withdrawals and urged users to refrain from depositing or repaying funds while the team worked on identifying the attack vector.
zkLend Hack Investigation Ongoing
This incident resembles the EraLend exploit in July 2023, where attackers stole $2.76 million from the zkSync-based lending protocol. The attack severely impacted EraLend, leaving it almost non-operational today.
Blockchain analysts traced the attacker’s Starknet address (0x04d7…3d3b26) and multiple L1-related test addresses, reinforcing suspicions that both hacks were orchestrated by the same group. As the zkLend hack investigation continues, cybersecurity experts closely monitor on-chain movements for further clues.
At the time of writing, the hackers have made no attempts to return the stolen funds to zkLend. The designated wallet address remains inactive, except for a few small test transactions from the project team.
| DISCLAIMER: The information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing. |