Starknet-based lending protocol zkLend has publicly acknowledged it was hacked for over $9 million.

It asked the hacker to keep 10% of the stolen funds as a “white hat” reward while asking for the return of the remaining 90%, which amounts to 3,300 ETH ($8.4 million).

ZkLend suspended withdrawal functions following the exploit to mitigate further risks and the team is investigating the exploit’s root cause.

To resolve the situation by negotiating with the hacker, zkLend wrote a message to the attacker, stating it wouldn’t take legal action if the attacker returned these funds.

“Upon receiving the transfer, we agree to release from any and all liability regarding the attack,” it wrote in an onchain message to the hacker's wallet.

The specifics of how the zkLend hack was executed are still under investigation. However, based on general patterns observed in similar DeFi hacks, the perpetrator might have exploited a vulnerability within the smart contract code to drain funds.

ZkLend added it was actively tracking the funds and pursuing the identification of the hacker in collaboration with other teams.

Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.

© 2024 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。