Share this article
BTC
$94,933.33
+
1.58%ETH
$1,796.81
+
2.09%USDT
$1.0007
+
0.03%XRP
$2.1894
-
0.22%BNB
$601.01
+
0.22%SOL
$151.12
+
0.10%USDC
$0.9998
+
0.00%DOGE
$0.1824
+
1.55%ADA
$0.7149
-
0.04%TRX
$0.2420
-
1.54%SUI
$3.5309
+
6.78%LINK
$15.02
+
0.55%AVAX
$22.32
+
0.49%XLM
$0.2851
+
2.17%SHIB
$0.0₄1406
+
3.69%LEO
$8.9390
-
3.33%HBAR
$0.1938
+
3.54%TON
$3.2180
+
1.32%BCH
$378.24
+
7.51%LTC
$86.98
+
3.65%Sign Up
- Back to menuPrices
- Back to menuResearch
- Back to menuConsensus
- Back to menu
- Back to menu
- Back to menu
- Back to menuWebinars & Events
ZkSync's Largest Lender Struck by $3.4M Exploit
EraLend said the threat has been contained, but advises against deposits.
EraLend, the largest lending protocol on Ethereum scaling blockchain zkSync, has been hit by a $3.4 million read-only reentrancy attack, according to blockchain security firm CertiK.
The total amount of capital locked on EraLend slumped to $10.75 million from $18.5 million following the exploit, DefiLlama data indicate.
STORY CONTINUES BELOW
"We've experienced a security incident on our platform today. The threat has been contained. We've suspended all borrowing operations for now and advise against depositing USDC. We're working with partners and cybersecurity firms to address this. More updates to follow," EraLend wrote in a tweet.
A read-only reentrancy bug allows an attacker to manipulate asset prices by flooding a smart contract with repeated calls in order to steal assets.
Decentralized finance (DeFi) protocol Conic Finance was hit by a similar attack last week with the total loss of $3.6 million.
UPDATE (July 25, 13:50 UTC): Removes space from EraLend's name throughout.
Oliver Knight
Oliver Knight is the co-leader of CoinDesk data tokens and data team. Before joining CoinDesk in 2022 Oliver spent three years as the chief reporter at Coin Rivet. He first started investing in bitcoin in 2013 and spent a period of his career working at a market making firm in the UK. He does not currently have any crypto holdings.
