Leaderboard
211All-time rank
zkLend logo

zkLend

Feb 11, 2025

$9.6M
Lost
$9.6M
Recovered
$0
Net loss
$9.6M
Unrecovered0% recovered

57M on February 11, 2025 on Starknet via an integer division rounding vulnerability. Attacker exploited truncated rounding in withdrawal calculations with precise wstETH deposits to inflate their raw_balance to 1724, draining all tokens from other pools.

2M after negotiation but lost remaining to a Tornado Cash scam.

Target
DeFi
Classification
Token & Share Accounting
Technique
First Depositor Attack
Attribution
Unknown
Chains
Starknet

Event timeline

  1. Feb 11, 2025
    Exploit executed — $9.6M drained via first depositor attack
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents