Leaderboard
561All-time rank
Purrlend
Apr 25, 2026
$1.5M
Lost
$1.5M
Recovered
$0
Net loss
$1.5M
Unrecovered0% recovered
Purrlend's 2-of-3 admin multisig was compromised on HyperEVM and MegaETH, allowing attackers to assign themselves the bridge role and inherit elevated permissions to drain liquidity pools.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Caller Impersonation
- Attribution
- Unknown
- Chains
MegaETHHyperliquid L1
Event timeline
- Apr 25, 2026Exploit executed — $1.5M drained via caller impersonation
- Attributed to Unknown
- Recovery status Unrecovered 0%