Purrlend
Last changed 2026-11-02 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score was recalculated from the page's findings, 49 → 57. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -6.4 |
| Incidents it suffered (e.g. hacks) | -3.2 |
| Problems around it, caused by others | -0.8 |
| Long-running | +2 |
| Sum | 57 |
- 1 section set aside: the claims did not hold up in a fact-check, pending correction.
Score: 57/100 (kept between 0 and 100)
How scoring works →Page reliability: Fact-checked 2026-11-02 · 7 of 12 claims confirmed · 5 need better sources
anchored·3ZsK3m…VU2uSummary
Purrlend is a non-custodial DeFi lending and borrowing protocol deployed on HyperEVM and MegaETH, operating as an Aave-style fork designed for leveraged yield farming. On April 25, 2026, the protocol suffered a multisig permission exploit that drained approximately $1.52 million across both networks, collapsing its TVL by roughly 70%. As of late May 2026, the protocol remains paused with no published post-mortem, recovery plan, or user compensation details.
Connected Entities
2 entities · 42 linked investigations- Purrlend→mentioned with→Hyperliquid(60%)
Connected Through
1 shared actor · 42 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □Hyperliquidorganization
Timeline(7 events)
February 2025
HyperEVM mainnet launches, enabling new DeFi deployments on Hyperliquid's EVM layer.
25 April 2026
At approximately 1:20 a.m. UTC, Purrlend's 2-of-3 admin multisig executes a suspicious transaction granting an unknown address the 'bridge' role with elevated permissions inherited from the underlying Aave-style implementation.
25 April 2026
Hours after the suspicious role assignment, the attacker uses the granted bridge privileges to mint unbacked tokens and drain liquidity pools across HyperEVM and MegaETH, stealing approximately $1.52 million.
25 April 2026
At approximately 9:10 a.m. UTC, Purrlend pauses all protocol operations and posts a brief statement on X: 'We have detected irregular activity on the protocol and are actively investigating.'
25 April 2026
Kirby Ong, founder of HypurrCollective, first publicly flags the exploit and documents attacker wallet addresses on both HyperEVM and MegaETH block explorers.
25 April 2026
Protocol TVL collapses from approximately $1.5 million to $444,000 as depositor flight follows news of the exploit.
26 May 2026
As of this investigation date, the Purrlend protocol remains paused. No post-mortem, user compensation plan, or recovery details have been published. The exploiting address has not been publicly attributed.
Decision Log
- slot 464350142 · hash DZT3QwbkBN6MLgUgH3464PwZ1dyEY5W3nJNHqUr4GE4H
- slot 464350137 · hash 67fmQfwGYfZPkkR4CkhbPyDznDb8NrS1J3H1J6JPga5c
- slot 464350132 · hash AAj8ktt8xY4YbEBqJQTVyii4FaawCyWYPzmxheekYqPC
- slot 455358624 · hash Crz1MjmTXASS8BLeiRiJbHexuqXaLucF5w6R8UVdnyAT
- slot 422339820 · hash DCqhBViQXnypSvv1sUxoYJXQHeN8pgsCCs1AM7kiuXg4
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 6 of 11 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:16 AM
last updated: 11/2/2026, 3:49:45 AM
5 viewsavoid.net — verified advice for a post-truth world