Skip to main content
AVOID.NET

LendHub

avoid.net/lendhub18/100·87% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2gSnKK…rxHK

Summary

LendHub was a decentralized cross-chain lending protocol operating primarily on the Huobi Eco Chain (HECO) and Binance Smart Chain (BSC). On January 12, 2023, the protocol suffered an approximately $6 million exploit caused by an operational failure to remove a deprecated IBSV cToken from its market, allowing an attacker to drain funds by arbitraging the two coexisting token versions. The protocol's TVL collapsed to near zero following the exploit, stolen funds were laundered through Tornado Cash, and the protocol is no longer considered operational.

Connected Entities

8 entities · 60 linked investigations
Relationships
  • Optimismmentioned withEthereum(80%)
  • Binancementioned withEthereum(65%)
  • Transit Swapmentioned withBinance(60%)
  • Transit Swapmentioned withEthereum(70%)
  • LendHubmentioned withHeco Bridge(70%)
  • LendHubmentioned withTransit Swap(80%)
  • Heco Bridgementioned withEthereum(70%)
  • Multichainmentioned withBinance(75%)
  • Multichainmentioned withOptimism(60%)
  • Heco Bridgementioned withHuobi(70%)
  • + 8 more
Have evidence about LendHub?

Timeline(8 events)

6 May 2021

LendHub launched on Huobi Global and promoted as HECO chain's fastest-growing lending protocol.

11 January 2023

The exploiter received 100 ETH from Tornado Cash on Ethereum and began staging the attack.

12 January 2023

LendHub exploited for approximately $6 million via deprecated IBSV cToken arbitrage vulnerability. TVL collapsed from $6 million to $90,305.

13 January 2023

LendHub acknowledged the exploit via Twitter. SlowMist, CertiK, and Halborn published analyses.

12 January 2023

Over 1,100 ETH (~$1.79 million) transferred to Tornado Cash within hours of the exploit.

27 February 2023

PeckShield and Beosin alert that a further 2,415 ETH (~$3.85 million) was moved to Tornado Cash from the attacker wallet, bringing the total laundered amount to approximately $5.7 million.

10 November 2024

HECO chain announced official retirement; users urged to convert and redeem assets by January 10, 2025.

10 January 2025

HECO chain redemption deadline passed. LendHub TVL reached $0 on DefiLlama; protocol considered effectively defunct.

Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 9 of 10 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:45 AM

last updated: 8/29/2026, 1:34:05 AM

4 views

avoid.net — verified advice for a post-truth world