A blockchain security researcher posting on X said an attacker has been quietly targeting multiple lending protocols over roughly the past month, with several projects apparently suffering undisclosed exploits and not publicly acknowledging them. The post circulating with this claim does not, by itself, identify the affected protocols or provide transaction-level evidence, but it fits a broader pattern in DeFi where lending systems are repeatedly hit through weaknesses in borrowing, liquidation, oracle, or governance logic. The wider context is that lending protocols are among the most frequently attacked DeFi primitives because they hold large pools of liquid assets and depend on complex on-chain rules for collateral, borrowing, liquidation, and pricing. Security writeups and incident analyses note that exploits often drain stablecoins and major assets from protocol pools, while flash-loan-based manipulation and other composable attack paths can let attackers chain actions across protocols very quickly. A separate recent case involving Moonwell also showed how even governance mechanics can be abused to threaten control of a lending protocol and its markets, underscoring that attackers can target both smart-contract and administrative surfaces. What makes the claim significant is the suggestion of a serial, low-noise campaign rather than a single public hack: if several lending teams were compromised without disclosure, users and other integrators could still be exposed while the market remains unaware. Because the X post is the only directly relevant source in the provided results, the specific protocols, losses, and exploit vectors remain unconfirmed from the available material.

AI-generated background, compiled from web sources — not editorial content.

More coverage

Explore the topic

Explore the full feed

Comments

Up nextForma shuts down its chain over unsustainable operations, moving NFTs to Ethereum