Decentralized lending platform Venus Protocol has reportedly suffered a suspected flash-loan attack on its Core Pool on BNB Chain, leading to losses of more than $3.7 million.
On-chain data shows the attacker manipulated supply caps using the Thena (THE) token, allowing them to borrow multiple assets from the protocol.
According to blockchain data, the attacker used an address starting with 0x1a35…6231 to exploit the system. The strategy began months earlier, when the attacker slowly accumulated around 84% of the THE supply cap (14.5M tokens) over nine months starting in June 2025.
The real exploit occurred when the attacker bypassed the normal deposit process by directly transferring tokens to the protocol contract.
This allowed them to exceed the supply cap and build a massive 53.2 million THE collateral position, which was nearly 3.7 times the allowed limit.
Using the inflated collateral, the attacker began borrowing large amounts of assets, including:
To maximize the exploit, the attacker repeatedly followed a loop strategy: deposit THE, borrow assets, buy more THE, and wait for the TWAP oracle price update to increase the collateral valuation.
This pushed the price of THE from around $0.263 to nearly $0.563 before the market eventually collapsed to about $0.22 during liquidation.
Following the incident, the team behind Venus Protocol announced precautionary measures. Borrowing and withdrawals of THE have been temporarily paused, along with several markets that showed high liquidity concentration, including BCH, LTC, UNI, AAVE, FIL, and TWT.
The protocol confirmed that all other markets remain operational and unaffected while the investigation continues.
The team also stated it will release a detailed report once the full analysis of the exploit is completed.
USDT0 is pushing deeper into cross-chain stablecoin infrastructure, with more than 80% of its USDT…
Ripple CEO Brad Garlinghouse says the simplest crypto strategy right now is straightforward, buy the…
The Ethereum price has cooled from $2,800 toward $2,660, but network activity isn't showing the…
Bitcoin slipped toward $83,800 this week. However, an analyst says there is no need to…
New York Attorney General Letitia James has sued Polymarket, accusing its U.S. business of running…
The NEAR price has finally escaped a falling wedge that controlled its market structure since…
