Solend

On August 19, 2021 at 12:40 GMT, Solend's UpdateReserveConfig() admin function was exploited when an attacker bypassed authorization checks by invoking the function with the admin's public key without requiring a valid signature. The attacker attempted to make lending accounts liquidatable, resulting in $16K in liquidations that were fully compensated by the liquidator.