LendHub
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 18 → 50. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −6.4, problems around the subject, caused by others −1.6; legitimacy credit long-running +6; no longer operating, so capped at 50. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -6.4 |
| Incidents it suffered (e.g. hacks) | -6.4 |
| Problems around it, caused by others | -1.6 |
| Long-running | +6 |
| Sum | 57 |
- No longer operating, so capped at 50.
Score: 50/100 (kept between 0 and 100)
How scoring works →Summary
LendHub was a decentralized cross-chain lending protocol operating primarily on the Huobi Eco Chain (HECO) and Binance Smart Chain (BSC). On January 12, 2023, the protocol suffered an approximately $6 million exploit caused by an operational failure to remove a deprecated IBSV cToken from its market, allowing an attacker to drain funds by arbitraging the two coexisting token versions. The protocol's TVL collapsed to near zero following the exploit, stolen funds were laundered through Tornado Cash, and the protocol is no longer considered operational.
Connected Entities
8 entities · 60 linked investigations- Optimism→mentioned with→Ethereum(80%)
- Binance→mentioned with→Ethereum(65%)
- Transit Swap→mentioned with→Binance(60%)
- Transit Swap→mentioned with→Ethereum(70%)
- LendHub→mentioned with→Heco Bridge(70%)
- LendHub→mentioned with→Transit Swap(80%)
- Heco Bridge→mentioned with→Ethereum(70%)
- Multichain→mentioned with→Binance(75%)
- Multichain→mentioned with→Optimism(60%)
- Heco Bridge→mentioned with→Huobi(70%)
- + 8 more
Timeline(8 events)
6 May 2021
LendHub launched on Huobi Global and promoted as HECO chain's fastest-growing lending protocol.
11 January 2023
The exploiter received 100 ETH from Tornado Cash on Ethereum and began staging the attack.
12 January 2023
LendHub exploited for approximately $6 million via deprecated IBSV cToken arbitrage vulnerability. TVL collapsed from $6 million to $90,305.
13 January 2023
LendHub acknowledged the exploit via Twitter. SlowMist, CertiK, and Halborn published analyses.
12 January 2023
Over 1,100 ETH (~$1.79 million) transferred to Tornado Cash within hours of the exploit.
27 February 2023
PeckShield and Beosin alert that a further 2,415 ETH (~$3.85 million) was moved to Tornado Cash from the attacker wallet, bringing the total laundered amount to approximately $5.7 million.
10 November 2024
HECO chain announced official retirement; users urged to convert and redeem assets by January 10, 2025.
10 January 2025
HECO chain redemption deadline passed. LendHub TVL reached $0 on DefiLlama; protocol considered effectively defunct.
Decision Log
- slot 455363328 · hash 9Q7uRJaV6kDQobsvgcaRcd3E1hRxN8upHPEvKbkrBb3i
- slot 422755653 · hash 5Qb6MVE8yiKpEmsZmc8YZYXZRy85c8StKToMdJHayoD4
This investigation is cryptographically anchored to the Solana blockchain (2 decisions). 9 of 10 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:45 AM
last updated: 10/10/2026, 6:43:15 PM
5 viewsavoid.net — verified advice for a post-truth world