{"investigation":{"slug":"zklend","entity_name":"zkLend","trust_score":50,"severity_base":50,"score_modifier":0,"confidence":0.88,"status":"published","content_type":"investigation","summary":"zkLend was a non-custodial decentralized money-market lending protocol on Starknet, an Ethereum zero-knowledge rollup, founded in 2022 by Brian Fu and Jane Ma and backed by investors including Delphi Digital, Three Arrows Capital, Alameda Research and StarkWare. In February 2025 an attacker chained an empty-market deposit, flash-loan 'donations' and a rounding error in the lending_accumulator mechanism to drain approximately $9.57 million, despite prior Nethermind audits; SlowMist alleges the attacker is the same actor behind the 2023 EraLend exploit. The protocol permanently shut down in June 2025, allocating its remaining approximately $200,000 treasury to a user recovery fund, leaving most affected users largely uncompensated.","sections":[{"content":"zkLend was a non-custodial, decentralized money-market protocol on Starknet, a zero-knowledge rollup Layer 2 for Ethereum. It let users deposit and borrow crypto assets including ETH, wstETH, USDC, USDT and STRK, and offered two environments: Artemis, a permissionless lending market for retail DeFi users, and Apollo, a permissioned institutional environment. zkLend was founded in February 2022 by Brian Fu, who brought over 15 years of traditional finance experience from Bloomberg and Standard Chartered Bank, and Jane Ma, who previously worked in Sales and Trading at Credit Suisse and as Chief of Staff at Deliveroo Hong Kong. The protocol officially launched on Starknet mainnet on October 19, 2023. Its native governance token, ZEND, was listed on major exchanges including Bybit and KuCoin.","heading":"Protocol Overview","sources":[{"url":"https://www.globenewswire.com/news-release/2022/03/29/2412153/0/en/StarkNet-money-market-zkLend-raises-5M-in-seed-round-led-by-Delphi-Digital.html","name":"StarkNet money market zkLend raises $5M seed round (GlobeNewswire)","type":"news_article","credibility":2},{"url":"https://www.coindesk.com/business/2022/03/29/delphi-digital-leads-5m-seed-round-for-money-market-protocol-zklend","name":"coindesk.com","type":"other","credibility":3},{"url":"https://mirror.xyz/decentdao.eth/YlGq-m2b2r_mHaebYCiksOpnA1zA19CIWZCr_o_T8zs","name":"mirror.xyz","type":"other","credibility":3},{"url":"https://finance.yahoo.com/news/delphi-digital-leads-5m-seed-122929760.html","name":"Delphi Digital Leads $5M Seed Round for ZkLend (Yahoo Finance)","type":"news_article","credibility":2},{"url":"https://zklend.gitbook.io/documentation/using-zklend/technical/audit-and-formal-specification","name":"zkLend Audit and Formal Specification (zkLend Documentation)","type":"official","credibility":2}],"severity":"low"},{"content":"In March 2022 zkLend raised $5 million in a seed round led by Delphi Digital (Delphi Ventures), with participation from Three Arrows Capital (3AC), StarkWare, Alameda Research, Genesis Block Ventures, CMS Holdings, Amber Group, MetaCartel DAO and others. Three Arrows Capital collapsed in June 2022 following the Terra/LUNA crash amid insolvency and was later subject to bankruptcy and liquidation proceedings; Alameda Research, the trading firm associated with FTX, filed for bankruptcy in November 2022 after the FTX collapse amid fraud. The presence of two now-defunct investors in the seed round is a matter of historical record; there is no public evidence that their failures caused operational problems for zkLend before the February 2025 exploit.","heading":"Funding and Investor Concerns","sources":[{"url":"https://cointelegraph.com/press-releases/money-market-zklend-raises-5m-in-seed-round-led-by-delphi-digital","name":"cointelegraph.com","type":"other","credibility":3},{"url":"https://www.coindesk.com/business/2022/03/29/delphi-digital-leads-5m-seed-round-for-money-market-protocol-zklend","name":"coindesk.com","type":"other","credibility":3},{"url":"https://www.globenewswire.com/news-release/2022/03/29/2412153/0/en/StarkNet-money-market-zkLend-raises-5M-in-seed-round-led-by-Delphi-Digital.html","name":"StarkNet money market zkLend raises $5M seed round (GlobeNewswire)","type":"news_article","credibility":2},{"url":"https://finance.yahoo.com/news/delphi-digital-leads-5m-seed-122929760.html","name":"Delphi Digital Leads $5M Seed Round for ZkLend (Yahoo Finance)","type":"news_article","credibility":2},{"url":"https://cryptoslate.com/layer-2-money-market-zklend-raises-5-million-in-seed-round/","name":"Layer-2 money market zkLend raises $5 million in seed round (CryptoSlate)","type":"news_article","credibility":2}],"severity":"medium"},{"content":"In February 2025 an attacker drained approximately $9.57 million from zkLend through the protocol's wstETH market. Reports differ on the timing: the zklend page, citing zkLend's post-mortem, BlockSec, Halborn, Rekt News, CoinTelegraph and CryptoSlate, places the exploit on February 11–12, 2025, while the zklend-starknet page, citing BlockSec, Halborn and Rekt News, gives February 12, 2025. Reports also differ on the composition of the stolen assets: the zklend page lists 2,213.64 ETH, 1,553,069.49 USDC, 7,426,029.99 STRK and 518,225.71 USDT, while the zklend-starknet page describes 2,930 ETH plus USDC, USDT and STRK.\n\nThe root cause was a combination of three individually tolerated design choices: (1) the wstETH market held zero balance, so a deposit of just 1 wei of wstETH could bootstrap an empty market; (2) a flash-loan mechanism treated excess repayment as a 'donation' that updated the global lending_accumulator variable; and (3) floor-division rounding in the zwstETH burn logic during withdrawals systematically underestimated balance changes. The attacker executed 10 flash-loan calls, each borrowing 1 wei of wstETH and repaying a larger amount (approximately 1,000 wei according to the zklend page), raising the accumulator from 1.0 to approximately 4,069,297,906,051,644,020 (about 4.069 × 10^18, roughly 4 billion times its baseline). By repeatedly depositing and withdrawing, the attacker's raw_balance fell by only 1 unit while more than 6 tokens were burned each cycle, growing from 2 to 1,724 and representing approximately 7,015.4 wstETH of inflated collateral, which was used to borrow and drain the other liquid assets in the protocol's pools. BlockSec's post-mortem clarified that the attack did not rely solely on a flash loan in the conventional sense and that the attacker did not profit from other users' deposited wstETH; the flaw inflated the attacker's own collateral. The exploit is described as technically similar to the EraLend hack of July 2023.","heading":"February 2025 Exploit","sources":[{"url":"https://medium.com/zklend/zklend-security-incident-post-mortem-27d9abaf66f6","name":"medium.com","type":"other","credibility":3},{"url":"https://blocksec.com/blog/zklend-exploit-post-mortem-unraveling-the-details-and-clarifying-misunderstandings-of-the-10m-flash-loan-attack","name":"zkLend Exploit Post-Mortem (BlockSec Blog)","type":"research","credibility":2},{"url":"https://www.halborn.com/blog/post/explained-the-zklend-hack-february-2025","name":"Explained: The zkLend Hack February 2025 (Halborn Security)","type":"research","credibility":2},{"url":"https://rekt.news/zklend-rekt","name":"zkLend — Rekt News","type":"news_article","credibility":2},{"url":"https://cointelegraph.com/news/zklend-starknet-hack-4-9m-bounty","name":"zkLend loses $9.5M in exploit, offers bounty to hacker (CoinTelegraph)","type":"news_article","credibility":1},{"url":"https://cryptoslate.com/zklend-hack-sees-9-5m-exploit-offers-hacker-10-bounty-for-return/","name":"cryptoslate.com","type":"other","credibility":3}],"severity":"critical"},{"content":"The attacker deployed a custom attack contract on Starknet, converted stolen tokens to ETH and bridged approximately $9.5 million to Ethereum Layer 1 via LayerSwap, Orbiter Bridge, Rhino.fi and the StarkGate ETH Bridge. Attacker addresses on Ethereum reported on the zklend page are 0x645c77833833a6654f7edaa977ebeabc680a9109 (identified on the zklend-starknet page as a primary receiving address), 0x0b7d061d91018aab823a755020e625ffe8b93074, 0xcd1c290198E12c4c1809271e683572FBF977Bb63 and 0x069E70C39A6495D31f518AE2F3c1166ddEfa5cAF.\n\nThe attacker attempted to launder 706.4 WETH through Railgun, an Ethereum privacy protocol, but Railgun's compliance and exclusion policies returned the funds to the originating address. The attacker then tried to use Tornado Cash and deposited 2,930 ETH (roughly $5.4 million at the time) into a phishing site impersonating the Tornado Cash frontend (tornadoeth.cash), losing those funds to the site's operators. Reports differ on the date: on or around March 31, 2025 according to the zklend page (CoinTelegraph, CryptoTimes, CryptoSlate, Cryptopolitan), and approximately April 1, 2025 according to the zklend-starknet page (Rekt News, Crypto.news, CryptoTimes). The attacker then posted an on-chain message to zkLend, quoted in two versions: 'I tried to move funds to tornado but I used a phishing website and all the funds have been lost. All the 2930 eth have been taken by that site owners.' (zklend page, sent via Etherscan) and 'I tried to move funds to Tornado, but I used a phishing website, and all the funds have been lost. I am devastated.' (zklend-starknet page, sent to zkLend's deployer address). The remaining stolen funds, estimated at several million dollars, stayed at the attacker's known Ethereum addresses as of the time of reporting.","heading":"Attacker Fund Movements and Laundering Attempts","sources":[{"url":"https://rekt.news/zklend-rekt","name":"zkLend — Rekt News","type":"news_article","credibility":2},{"url":"https://medium.com/zklend/zklend-security-incident-post-mortem-27d9abaf66f6","name":"medium.com","type":"other","credibility":3},{"url":"https://u.today/vitalik-buterin-breaks-silence-on-zklend-exploit-flaunts-railgun","name":"Vitalik Buterin Breaks Silence on zkLend Exploit, Flaunts Railgun (U.Today)","type":"news_article","credibility":2},{"url":"https://cointelegraph.com/news/zk-lend-hacker-loses-stolen-eth-after-depositing-it-into-a-tornado-cash-phishing-site","name":"cointelegraph.com","type":"other","credibility":3},{"url":"https://crypto.news/zklend-hacker-loses-all-2930-stolen-eth-to-tornadocash-phishing-scam/","name":"zkLend hacker loses 2,930 stolen ETH to Tornado Cash phishing scam (Crypto.news)","type":"news_article","credibility":2},{"url":"https://www.cryptotimes.io/2025/04/03/zklend-hacker-loses-5-4m-in-phishing-attack-while-using-tornado-cash/","name":"zkLend Hacker Loses $5.4M in Phishing Attack While Using Tornado Cash (CryptoTimes)","type":"news_article","credibility":2},{"url":"https://cryptoslate.com/hacker-falls-victim-to-phishing-scam-after-exploiting-zklend-for-millions/","name":"cryptoslate.com","type":"other","credibility":3},{"url":"https://www.cryptopolitan.com/zklend-hacker-loses-funds-phishing/","name":"cryptopolitan.com","type":"other","credibility":3}],"severity":"critical"},{"content":"Blockchain security firm SlowMist published an on-chain forensic analysis alleging that the zkLend attacker is the same individual or group responsible for the July 25, 2023 exploit of EraLend, a lending protocol on zkSync hit by a read-only reentrancy attack. Reports differ on EraLend's losses: approximately $2.76 million according to the zklend page (SlowMist, BitcoinEthereumNews), and approximately $3.4 million according to the zklend-starknet page (SlowMist, PANews, Halborn). According to SlowMist, the Starknet attacker address 0x04d7191dc8eac499bac710dd368706e3ce76c9945da52535de770d06ce7d3b26 conducted test transactions with three Ethereum L1 addresses before the zkLend attack: 0xd95b3c1e638ce3cdc070ad6d4f385c61e2ee8662, 0x93920786e0fda8496248c4447e2e082da69b6c40 and 0x34e5dc779cb705200e951239b6a89aaf5c7dbfc1. The latter two had previously received stolen funds from the EraLend attack, and comparable bridge usage patterns were noted across both incidents. The alleged link points to a repeat threat actor, but it rests on on-chain forensics; the attacker has not been publicly identified and no law-enforcement confirmation has been reported.","heading":"Alleged Link to the EraLend Exploit","sources":[{"url":"https://slowmist.medium.com/in-depth-analysis-of-zklend-hack-linked-to-eralend-hack-fba4af9b66ef","name":"In-Depth Analysis of zkLend Hack Linked to EraLend Hack (SlowMist / Medium)","type":"research","credibility":2},{"url":"https://bitcoinethereumnews.com/tech/starknets-zklend-hacked-by-same-attacker-as-eralend-reveals-slowmists-chandler-guo/","name":"bitcoinethereumnews.com","type":"other","credibility":3},{"url":"https://www.panewslab.com/en/sqarticledetails/3n036o62.html","name":"SlowMist: zkLend attacker is same hacker as EraLend 2023 (PANews)","type":"news_article","credibility":2},{"url":"https://www.halborn.com/blog/post/explained-the-eralend-hack-july-2023","name":"Explained: The Eralend Hack July 2023 (Halborn Security)","type":"research","credibility":2}],"severity":"high"},{"content":"zkLend suspended all withdrawals and launched an investigation. Within six hours of the exploit it issued an on-chain message and public statement offering the attacker a standard 10% white-hat bounty, approximately 3,300 ETH, with a deadline of February 14, 2025 at midnight UTC and a promise of no legal action if the remaining funds were returned. The attacker did not respond and returned no funds. zkLend said it was pursuing legal channels and working with blockchain forensics firm zeroShadow to trace and recover funds.\n\nOn or about March 5, 2025, zkLend opened a Recovery Portal for affected users to register claims, advising them to verify communications through official channels. Deposits in pools unaffected by the exploit were to be refunded in full; deposits in affected pools were to receive partial compensation plus a pro-rata claim on a recovery pool, represented by approximately 82,818 recovery NFTs. The team estimated the total funding gap at approximately $9,013,101.72 and contributed approximately $400,000 toward the recovery fund by forfeiting protocol revenue and treasury deposit claims.","heading":"Protocol Response, Bounty and Compensation Plan","sources":[{"url":"https://cointelegraph.com/news/zklend-starknet-hack-4-9m-bounty","name":"zkLend loses $9.5M in exploit, offers bounty to hacker (CoinTelegraph)","type":"news_article","credibility":1},{"url":"https://medium.com/zklend/zklend-compensation-plan-5682dcf91f57","name":"zkLend Compensation Plan (zkLend / Medium)","type":"official","credibility":2},{"url":"https://crypto.news/zklend-opens-recovery-portal-for-zklend-exploit-2025/","name":"zkLend opens recovery portal for users (Crypto.news)","type":"news_article","credibility":2},{"url":"https://cryptonews.com/news/zklend-launches-recovery-portal-for-victims-of-the-drained-9-6-million/","name":"cryptonews.com","type":"other","credibility":3}],"severity":"high"},{"content":"On June 25, 2025, about four months after the exploit, zkLend announced it was permanently winding down operations. The team said the exploit had 'deeply eroded user confidence' and that the subsequent delisting of ZEND from major exchanges including Bybit and KuCoin had 'constrained token liquidity and accessibility', precluding any viable relaunch. It allocated its remaining treasury of approximately $200,000 to the user recovery fund, a small fraction of the approximately $9.57 million lost, making the outcome close to a total loss for affected depositors. The team said it would keep the DeFi Spring, recovery and kSTRK portals open so users could unstake or claim remaining funds, would open-source its audited and updated codebase, and would continue working with zeroShadow, directing any recovered assets to the user fund. A $500,000 bounty for information leading to the attacker's capture was reportedly maintained.","heading":"Shutdown and User Impact","sources":[{"url":"https://crypto.news/starknet-based-l2-protocol-zklend-shuts-down/","name":"crypto.news","type":"other","credibility":3},{"url":"https://cryptobriefing.com/zklend-shutdown-zend-delisting/","name":"Starknet-based zkLend shuts down following exploit and ZEND token delisting (CryptoBriefing)","type":"news_article","credibility":2},{"url":"https://cryptonews.com/news/zklend-shuts-down-200k-recovery-fund-users/","name":"zkLend Shuts Down: $200K Recovery Fund for Users (CryptoNews)","type":"news_article","credibility":2},{"url":"https://www.ainvest.com/news/zklend-shuts-9-5-million-exploit-allocates-200-000-recovery-fund-2506/","name":"ainvest.com","type":"other","credibility":3},{"url":"https://thedefiant.io/news/defi/starknet-based-zklend-shuts-down-amid-fallout-from-usd10-million-exploit","name":"Starknet-based ZkLend Shuts Down Amid Fallout From $10 Million Exploit (The Defiant)","type":"news_article","credibility":2},{"url":"https://www.dlnews.com/articles/defi/defi-protocol-zklend-shuts-down-four-months-after-9m-hack/","name":"DeFi lending protocol hits the white flag four months after $9M hack (DL News)","type":"news_article","credibility":2},{"url":"https://unchainedcrypto.com/zklend-winds-down-after-february-exploit-erodes-confidence/","name":"zkLend Winds Down After February Exploit Erodes Confidence (Unchained Crypto)","type":"news_article","credibility":2}],"severity":"critical"},{"content":"zkLend's contracts were audited by Nethermind Security at least twice, in May 2022 and September 2023; the Cairo 1 contracts were audited before deployment in October 2023, and the earlier Cairo 0 contracts were also audited and formally specified. A public audit report (NM0161-FINAL_ZKLEND_ZKTOKEN.pdf) is available in Nethermind's public GitHub repository. The audits reportedly identified no critical issues and did not catch the rounding-error vulnerability in the lending_accumulator mechanism that was later exploited. Rounding errors in accumulator-based lending math are a known class of DeFi exploit, and the case has been cited in the DeFi security community as an example of individually non-critical design choices combining into an exploitable attack surface. Halborn and BlockSec each published post-mortems documenting the root cause.","heading":"Audit Record and Security Failures","sources":[{"url":"https://github.com/NethermindEth/PublicAuditReports","name":"github.com","type":"other","credibility":3},{"url":"https://zklend.gitbook.io/documentation/using-zklend/technical/audit-and-formal-specification","name":"zkLend Audit and Formal Specification (zkLend Documentation)","type":"official","credibility":2},{"url":"https://www.halborn.com/blog/post/explained-the-zklend-hack-february-2025","name":"Explained: The zkLend Hack February 2025 (Halborn Security)","type":"research","credibility":2},{"url":"https://blocksec.com/blog/zklend-exploit-post-mortem-unraveling-the-details-and-clarifying-misunderstandings-of-the-10m-flash-loan-attack","name":"zkLend Exploit Post-Mortem (BlockSec Blog)","type":"research","credibility":2},{"url":"https://www.okx.com/learn/zklend-hack-starknet-defi-vulnerabilities","name":"zkLend Hack: $10M Exploit Exposes Starknet Vulnerabilities (OKX Learn)","type":"news_article","credibility":2}],"severity":"high"}],"timeline":[{"date":"2022-02","event":"zkLend founded by Brian Fu and Jane Ma.","source":""},{"date":"2022-03","event":"zkLend raises a $5 million seed round led by Delphi Digital, with Three Arrows Capital, StarkWare, Alameda Research and others participating.","source":"GlobeNewswire","source_url":"https://www.globenewswire.com/news-release/2022/03/29/2412153/0/en/StarkNet-money-market-zkLend-raises-5M-in-seed-round-led-by-Delphi-Digital.html"},{"date":"2022-07","event":"zkLend testnet opens.","source":""},{"date":"2023-07","event":"EraLend, a lending protocol on zkSync, is exploited via a read-only reentrancy vulnerability (reported losses differ: about $2.76 million or about $3.4 million). SlowMist later alleges the same attacker carried out the zkLend exploit.","source":"Halborn Security","source_url":"https://www.halborn.com/blog/post/explained-the-eralend-hack-july-2023"},{"date":"2023-10","event":"zkLend's Cairo 1 smart contracts, audited by Nethermind, are deployed on Starknet ahead of Starknet Regenesis.","source":"zkLend Documentation","source_url":"https://zklend.gitbook.io/documentation/using-zklend/technical/audit-and-formal-specification"},{"date":"2023-10","event":"zkLend officially launches on Starknet mainnet with its Artemis and Apollo environments.","source":""},{"date":"2025-02","event":"Attacker manipulates the wstETH market's lending_accumulator through flash loans and rounding errors, draining approximately $9.57 million in ETH, USDC, STRK and USDT (reported as February 11–12 or February 12).","source":"Rekt News","source_url":"https://rekt.news/zklend-rekt"},{"date":"2025-02","event":"zkLend suspends withdrawals, discloses the exploit and offers a 10% white-hat bounty (about 3,300 ETH) with a February 14 midnight UTC deadline and a promise of no legal action.","source":"CoinTelegraph","source_url":"https://cointelegraph.com/news/zklend-starknet-hack-4-9m-bounty"},{"date":"2025-02","event":"Stolen funds are bridged to Ethereum; the attacker tries to launder 706.4 WETH through Railgun, whose policies return the funds to the originating address (dated February 12 on one page and February 14 on the other).","source":"Rekt News","source_url":"https://rekt.news/zklend-rekt"},{"date":"2025-02","event":"Bounty deadline passes with no response or return of funds; zkLend says it will pursue legal action and engage forensics firm zeroShadow.","source":"CoinTelegraph","source_url":"https://cointelegraph.com/news/zklend-starknet-hack-4-9m-bounty"},{"date":"2025-03","event":"zkLend opens a Recovery Portal for affected users, with full compensation for unaffected-pool deposits and partial compensation for affected pools, including about 82,818 recovery NFTs.","source":"Crypto.news","source_url":"https://crypto.news/zklend-opens-recovery-portal-for-zklend-exploit-2025/"},{"date":"2025-03","event":"The attacker loses 2,930 ETH (about $5.4 million) by depositing it into a fake Tornado Cash phishing site (tornadoeth.cash) and posts an on-chain message to zkLend admitting the loss; reports date this on or around March 31 or approximately April 1, 2025.","source":"Crypto.news","source_url":"https://crypto.news/zklend-hacker-loses-all-2930-stolen-eth-to-tornadocash-phishing-scam/"},{"date":"2025-06","event":"zkLend announces the permanent shutdown of operations, citing the exploit's erosion of user confidence and the delisting of ZEND from Bybit and KuCoin, and allocates its remaining approximately $200,000 treasury to a user recovery fund.","source":"DL News","source_url":"https://www.dlnews.com/articles/defi/defi-protocol-zklend-shuts-down-four-months-after-9m-hack/"}],"sources_used":[{"url":"https://www.globenewswire.com/news-release/2022/03/29/2412153/0/en/StarkNet-money-market-zkLend-raises-5M-in-seed-round-led-by-Delphi-Digital.html","name":"StarkNet money market zkLend raises $5M seed round (GlobeNewswire)","type":"news_article","archive_url":"https://web.archive.org/web/20260802124426/https://www.globenewswire.com/news-release/2022/03/29/2412153/0/en/StarkNet-money-market-zkLend-raises-5M-in-seed-round-led-by-Delphi-Digital.html","credibility":2,"archive_timestamp":"2026-08-02T12:44:26+00:00"},{"url":"https://www.coindesk.com/business/2022/03/29/delphi-digital-leads-5m-seed-round-for-money-market-protocol-zklend","name":"coindesk.com","type":"other","archive_url":"http://web.archive.org/web/20251205132853/https://www.coindesk.com/business/2022/03/29/delphi-digital-leads-5m-seed-round-for-money-market-protocol-zklend","credibility":3,"archive_timestamp":"2025-12-05T13:28:53+00:00"},{"url":"https://mirror.xyz/decentdao.eth/YlGq-m2b2r_mHaebYCiksOpnA1zA19CIWZCr_o_T8zs","name":"mirror.xyz","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://cointelegraph.com/press-releases/money-market-zklend-raises-5m-in-seed-round-led-by-delphi-digital","name":"cointelegraph.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://medium.com/zklend/zklend-security-incident-post-mortem-27d9abaf66f6","name":"medium.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://blocksec.com/blog/zklend-exploit-post-mortem-unraveling-the-details-and-clarifying-misunderstandings-of-the-10m-flash-loan-attack","name":"zkLend Exploit Post-Mortem (BlockSec Blog)","type":"research","archive_url":"http://web.archive.org/web/20260415194735/https://blocksec.com/blog/zklend-exploit-post-mortem-unraveling-the-details-and-clarifying-misunderstandings-of-the-10m-flash-loan-attack","credibility":2,"archive_timestamp":"2026-04-15T19:47:35+00:00"},{"url":"https://www.halborn.com/blog/post/explained-the-zklend-hack-february-2025","name":"Explained: The zkLend Hack February 2025 (Halborn Security)","type":"research","archive_url":"http://web.archive.org/web/20260207111622/https://www.halborn.com/blog/post/explained-the-zklend-hack-february-2025","credibility":2,"archive_timestamp":"2026-02-07T11:16:22+00:00"},{"url":"https://rekt.news/zklend-rekt","name":"zkLend — Rekt News","type":"news_article","archive_url":"http://web.archive.org/web/20260518010231/https://rekt.news/zklend-rekt","credibility":2,"archive_timestamp":"2026-05-18T01:02:31+00:00"},{"url":"https://cointelegraph.com/news/zklend-starknet-hack-4-9m-bounty","name":"zkLend loses $9.5M in exploit, offers bounty to hacker (CoinTelegraph)","type":"news_article","archive_url":"http://web.archive.org/web/20250917185951/https://cointelegraph.com/news/zklend-starknet-hack-4-9m-bounty","credibility":1,"archive_timestamp":"2025-09-17T18:59:51+00:00"},{"url":"https://cryptoslate.com/zklend-hack-sees-9-5m-exploit-offers-hacker-10-bounty-for-return/","name":"cryptoslate.com","type":"other","archive_url":"https://web.archive.org/web/20260829075153/https://cryptoslate.com/zklend-hack-sees-9-5m-exploit-offers-hacker-10-bounty-for-return/","credibility":3,"archive_timestamp":"2026-08-29T07:51:53+00:00"},{"url":"https://slowmist.medium.com/in-depth-analysis-of-zklend-hack-linked-to-eralend-hack-fba4af9b66ef","name":"In-Depth Analysis of zkLend Hack Linked to EraLend Hack (SlowMist / Medium)","type":"research","archive_url":"http://web.archive.org/web/20250906080046/https://slowmist.medium.com/in-depth-analysis-of-zklend-hack-linked-to-eralend-hack-fba4af9b66ef","credibility":2,"archive_timestamp":"2025-09-06T08:00:46+00:00"},{"url":"https://bitcoinethereumnews.com/tech/starknets-zklend-hacked-by-same-attacker-as-eralend-reveals-slowmists-chandler-guo/","name":"bitcoinethereumnews.com","type":"other","archive_url":"http://web.archive.org/web/20260829024239/https://bitcoinethereumnews.com/tech/starknets-zklend-hacked-by-same-attacker-as-eralend-reveals-slowmists-chandler-guo/","credibility":3,"archive_timestamp":"2026-08-29T02:42:39+00:00"},{"url":"https://cointelegraph.com/news/zk-lend-hacker-loses-stolen-eth-after-depositing-it-into-a-tornado-cash-phishing-site","name":"cointelegraph.com","type":"other","archive_url":"https://web.archive.org/web/20260830071748/https://cointelegraph.com/news/zk-lend-hacker-loses-stolen-eth-after-depositing-it-into-a-tornado-cash-phishing-site","credibility":3,"archive_timestamp":"2026-08-30T07:17:48+00:00"},{"url":"https://www.cryptotimes.io/2025/04/03/zklend-hacker-loses-5-4m-in-phishing-attack-while-using-tornado-cash/","name":"zkLend Hacker Loses $5.4M in Phishing Attack While Using Tornado Cash (CryptoTimes)","type":"news_article","archive_url":"https://web.archive.org/web/20260802124319/https://www.cryptotimes.io/2025/04/03/zklend-hacker-loses-5-4m-in-phishing-attack-while-using-tornado-cash/","credibility":2,"archive_timestamp":"2026-08-02T12:43:19+00:00"},{"url":"https://cryptoslate.com/hacker-falls-victim-to-phishing-scam-after-exploiting-zklend-for-millions/","name":"cryptoslate.com","type":"other","archive_url":"http://web.archive.org/web/20250911221331/https://cryptoslate.com/hacker-falls-victim-to-phishing-scam-after-exploiting-zklend-for-millions/","credibility":3,"archive_timestamp":"2025-09-11T22:13:31+00:00"},{"url":"https://www.cryptopolitan.com/zklend-hacker-loses-funds-phishing/","name":"cryptopolitan.com","type":"other","archive_url":"http://web.archive.org/web/20260117011032/https://www.cryptopolitan.com/zklend-hacker-loses-funds-phishing/","credibility":3,"archive_timestamp":"2026-01-17T01:10:32+00:00"},{"url":"https://medium.com/zklend/zklend-compensation-plan-5682dcf91f57","name":"zkLend Compensation Plan (zkLend / Medium)","type":"official","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://crypto.news/zklend-opens-recovery-portal-for-zklend-exploit-2025/","name":"zkLend opens recovery portal for users (Crypto.news)","type":"news_article","archive_url":"http://web.archive.org/web/20251207134036/https://crypto.news/zklend-opens-recovery-portal-for-zklend-exploit-2025/","credibility":2,"archive_timestamp":"2025-12-07T13:40:36+00:00"},{"url":"https://cryptonews.com/news/zklend-launches-recovery-portal-for-victims-of-the-drained-9-6-million/","name":"cryptonews.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://crypto.news/starknet-based-l2-protocol-zklend-shuts-down/","name":"crypto.news","type":"other","archive_url":"http://web.archive.org/web/20251010035007/https://crypto.news/starknet-based-l2-protocol-zklend-shuts-down/","credibility":3,"archive_timestamp":"2025-10-10T03:50:07+00:00"},{"url":"https://cryptobriefing.com/zklend-shutdown-zend-delisting/","name":"Starknet-based zkLend shuts down following exploit and ZEND token delisting (CryptoBriefing)","type":"news_article","archive_url":"http://web.archive.org/web/20260115145529/https://cryptobriefing.com/zklend-shutdown-zend-delisting/","credibility":2,"archive_timestamp":"2026-01-15T14:55:29+00:00"},{"url":"https://cryptonews.com/news/zklend-shuts-down-200k-recovery-fund-users/","name":"zkLend Shuts Down: $200K Recovery Fund for Users (CryptoNews)","type":"news_article","archive_url":"http://web.archive.org/web/20250805134134/https://cryptonews.com/news/zklend-shuts-down-200k-recovery-fund-users/","credibility":2,"archive_timestamp":"2025-08-05T13:41:34+00:00"},{"url":"https://www.ainvest.com/news/zklend-shuts-9-5-million-exploit-allocates-200-000-recovery-fund-2506/","name":"ainvest.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://github.com/NethermindEth/PublicAuditReports","name":"github.com","type":"other","archive_url":"http://web.archive.org/web/20260305113645/https://github.com/NethermindEth/PublicAuditReports","credibility":3,"archive_timestamp":"2026-03-05T11:36:45+00:00"},{"url":"https://thedefiant.io/news/defi/starknet-based-zklend-shuts-down-amid-fallout-from-usd10-million-exploit","name":"Starknet-based ZkLend Shuts Down Amid Fallout From $10 Million Exploit (The Defiant)","type":"news_article","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.halborn.com/blog/post/explained-the-eralend-hack-july-2023","name":"Explained: The Eralend Hack July 2023 (Halborn Security)","type":"research","archive_url":"http://web.archive.org/web/20260415064850/https://www.halborn.com/blog/post/explained-the-eralend-hack-july-2023","credibility":2,"archive_timestamp":"2026-04-15T06:48:50+00:00"},{"url":"https://www.dlnews.com/articles/defi/defi-protocol-zklend-shuts-down-four-months-after-9m-hack/","name":"DeFi lending protocol hits the white flag four months after $9M hack (DL News)","type":"news_article","archive_url":"http://web.archive.org/web/20260629151819/https://www.dlnews.com/articles/defi/defi-protocol-zklend-shuts-down-four-months-after-9m-hack/","credibility":2,"archive_timestamp":"2026-06-29T15:18:19+00:00"},{"url":"https://crypto.news/zklend-hacker-loses-all-2930-stolen-eth-to-tornadocash-phishing-scam/","name":"zkLend hacker loses 2,930 stolen ETH to Tornado Cash phishing scam (Crypto.news)","type":"news_article","archive_url":"http://web.archive.org/web/20250808113439/https://crypto.news/zklend-hacker-loses-all-2930-stolen-eth-to-tornadocash-phishing-scam/","credibility":2,"archive_timestamp":"2025-08-08T11:34:39+00:00"},{"url":"https://finance.yahoo.com/news/delphi-digital-leads-5m-seed-122929760.html","name":"Delphi Digital Leads $5M Seed Round for ZkLend (Yahoo Finance)","type":"news_article","archive_url":"https://web.archive.org/web/20260802171025/https://finance.yahoo.com/news/delphi-digital-leads-5m-seed-122929760.html","credibility":2,"archive_timestamp":"2026-08-02T17:10:25+00:00"},{"url":"https://www.panewslab.com/en/sqarticledetails/3n036o62.html","name":"SlowMist: zkLend attacker is same hacker as EraLend 2023 (PANews)","type":"news_article","archive_url":"https://web.archive.org/web/20261106045155/https://panews.io/articles/3n036o62","credibility":2,"archive_timestamp":"2026-11-06T04:51:55+00:00"},{"url":"https://zklend.gitbook.io/documentation/using-zklend/technical/audit-and-formal-specification","name":"zkLend Audit and Formal Specification (zkLend Documentation)","type":"official","archive_url":"http://web.archive.org/web/20260213161513/https://zklend.gitbook.io/documentation/using-zklend/technical/audit-and-formal-specification","credibility":2,"archive_timestamp":"2026-02-13T16:15:13+00:00"},{"url":"https://unchainedcrypto.com/zklend-winds-down-after-february-exploit-erodes-confidence/","name":"zkLend Winds Down After February Exploit Erodes Confidence (Unchained Crypto)","type":"news_article","archive_url":"https://web.archive.org/web/20260802145521/https://unchainedcrypto.com/zklend-winds-down-after-february-exploit-erodes-confidence/","credibility":2,"archive_timestamp":"2026-08-02T14:55:21+00:00"},{"url":"https://u.today/vitalik-buterin-breaks-silence-on-zklend-exploit-flaunts-railgun","name":"Vitalik Buterin Breaks Silence on zkLend Exploit, Flaunts Railgun (U.Today)","type":"news_article","archive_url":"https://web.archive.org/web/20261028164604/https://u.today/ripple-president-explains-why-robinhood-chose-rlusd-stablecoin","credibility":2,"archive_timestamp":"2026-10-28T16:46:04+00:00"},{"url":"https://cryptoslate.com/layer-2-money-market-zklend-raises-5-million-in-seed-round/","name":"Layer-2 money market zkLend raises $5 million in seed round (CryptoSlate)","type":"news_article","archive_url":"https://web.archive.org/web/20261028164016/https://cryptoslate.com/layer-2-money-market-zklend-raises-5-million-in-seed-round/","credibility":2,"archive_timestamp":"2026-10-28T16:40:16+00:00"},{"url":"https://www.okx.com/learn/zklend-hack-starknet-defi-vulnerabilities","name":"zkLend Hack: $10M Exploit Exposes Starknet Vulnerabilities (OKX Learn)","type":"news_article","archive_url":"https://web.archive.org/web/20261028165100/https://www.okx.com/en-us/learn/zklend-hack-starknet-defi-vulnerabilities","credibility":2,"archive_timestamp":"2026-10-28T16:51:00+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":true,"reviewed_by":null,"model_used":"claude-code-merge-writer","created_at":"2026-05-04T02:54:25.639063+00:00","updated_at":"2026-11-06T04:55:07.931469+00:00"},"source_quality":{"total":35,"tier1":0,"tier2":6,"tier3":0,"unrated":29},"follower_count":null,"content_updated_at":"2026-11-01T22:17:52.560Z","last_fact_checked_at":"2026-11-01T22:17:51.759Z","fact_check_next_allowed_at":"2026-11-08T22:17:51.759Z","update_next_allowed_at":null}