News View Non-AMP

Don’t Fall for This DeFi Scam! Venus User Loses $27M in One Click

Published by
Nidhi Kolhapur and Zafar Naik

The DeFi space is facing another wave of attacks. Hackers are getting smarter, using social engineering tactics and smart contract weaknesses to steal millions.

Two major incidents this week, one targeting a Venus Protocol account and another affecting Bunni exchange, have shaken the crypto community and sparked new fears over DeFi security.

Venus Protocol Account Loses $27M

A major account on the Venus Protocol, a leading lending platform on the BNB Chain, was compromised, losing about $27 million in a hack. Blockchain analysts believe the user’s interaction with the Core Pool Comptroller contract allowed attackers to steal tokens like vUSDC and vETH.

The stolen funds from Venus Protocol are still stuck in the attacker’s contract. Blockchain security firms Cyvers Alerts and Peckshield flagged the suspicious activity.

A Costly Social Engineering Trap

This was not a typical exploit based on coding errors but a social engineering attack. The victim unknowingly approved a malicious transaction, giving the attacker full access to their wallet. The stolen assets included: $19.8M in vUSDT, $7.15M in vUSDC, $146K in vXRP, $22K in vETH, and even 285 BTCB. 

Crypto analyst @Crypto Jargon notes that this was purely a “social engineering attack”, showing how one careless approval can drain a fortune instantly. He advised crypto users to avoid clicking unknown links, double-check transactions, revoke approvals regularly, and use hardware wallets whenever possible.

Venus Responds

Venus Protocol confirmed the breach but reassured users that its smart contracts remain secure. The platform was paused as a precaution while the team investigates.

They emphasized that Venus itself was not exploited and assured users that they are closely monitoring the situation. 

Even with these reassurances, Venus’s governance token XVS fell 6% in 24 hours, dropping to $5.97.

Bunni Hit by $2.4M Exploit

Meanwhile, decentralized exchange Bunni also suffered a $2.4 million exploit. Bunni’s smart contract vulnerabilities were exploited, affecting assets across both Ethereum and UniChain networks.

All smart contract functions have been paused as a precaution while the team investigates. These two incidents highlight the biggest risks in DeFi: users falling for scams and vulnerabilities in smart contracts.

Crypto hacks have surged in August, with $163 million stolen across 16 attacks. Cybersecurity experts warn that hackers are shifting focus to exchanges and wealthy individuals, signaling rising threats in the booming market.

FAQs

What happened in the Venus Protocol hack?

A user’s wallet was drained of $27M in vUSDT, vUSDC, and other tokens via a social engineering attack, not a protocol exploit. Venus paused operations as a precaution.

How did the attacker steal the funds?

The victim approved a malicious transaction, granting the attacker full access to their tokens. The stolen funds remain trapped in the attacker’s contract.

Nidhi Kolhapur and Zafar Naik

Nidhi is a Certified Digital Marketing Executive and Passionate crypto Journalist covering the world of alternative currencies. She shares the latest and trending news on Cryptocurrency and Blockchain.

Trust with CoinPedia:

CoinPedia has been delivering accurate and timely cryptocurrency and blockchain updates since 2017. All content is created by our expert panel of analysts and journalists, following strict Editorial Guidelines based on E-E-A-T (Experience, Expertise, Authoritativeness, Trustworthiness). Every article is fact-checked against reputable sources to ensure accuracy, transparency, and reliability. Our review policy guarantees unbiased evaluations when recommending exchanges, platforms, or tools. We strive to provide timely updates about everything crypto & blockchain, right from startups to industry majors.

Investment Disclaimer:

All opinions and insights shared represent the author's own views on current market conditions. Please do your own research before making investment decisions. Neither the writer nor the publication assumes responsibility for your financial choices.

Sponsored and Advertisements:

Sponsored content and affiliate links may appear on our site. Advertisements are marked clearly, and our editorial content remains entirely independent from our ad partners.

Recent Posts

Flip 0.5 Ethereum Worth $2,275 Now Into Ozak AI: Get 189,583 Tokens, Which Will Be $189,583 at $1 Target

The potential for massive returns is always present—especially when you identify the right project at…

October 15, 2025

Can XRP & ADA Explode by 5X? Analysts Back Digitap for 50X Gain as Global Payment App Goes Live

Can the XRP price or Cardano price surge by 5x this cycle? Besides their large…

October 15, 2025

Ripple News: XRP ETF Approval Nears as Public Companies Hold $11.5B in XRP

Ripple (XRP)’s long struggle might be ending. Once seen as stuck below $3, it’s now…

October 15, 2025

CMB International Brings $3.8B Money Market Fund on BNB Chain

CMB International Asset Management, a subsidiary of China Merchants Bank, has taken a major step…

October 15, 2025

Which Crypto To Buy Today For Long-Term As Peter Schiff Claims Bitcoin Could Drop to $75K

Bitcoin has fallen below $110,000 in recent weeks, and Ethereum has fallen below $3,700, which…

October 15, 2025

Why Is The Crypto Market Falling Down, And How Pepeto Leads 2025 Best Meme Coin Picks

The crypto market, on 11th Oct 2025, is putting conviction to the test again. Over…

October 15, 2025