Security Incident
zkLend Contract Vulnerability: $9.60M Reported Loss
The leading lending platform on the Starknet chain, zkLend, has suffered an attack.
- Reported loss
- $ 9,600,000
- Attack category
- Contract Vulnerability
Incident Overview
The core reason for this breach lies in the fact that the value of the accumulator in an empty market can be manipulated and amplified using a unique mechanism in flash loans. Additionally, the market contract's use of the SafeMath library performs division using direct division, allowing the attacker to exploit the amplified accumulator to trigger a rounding-down vulnerability for profit.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.