Verify a decision

{"actor":"system:backfill","investigation_id":"ec31964a-e60e-4b74-8653-c508cbe10f02","kind":"publish","page_slug":"lendhub","published_at":"2026-05-28T16:22:06.724Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"LendHub","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-lendhub-hack-january-2023","type":"other","url":""},{"credibility":3,"name":"https://www.certik.com/resources/blog/1IDWJfEBm6GK5sIIdfhfQn-lendhub-incident-analysis","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/lendhub","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cryptopotato.com/lendhub-exploiter-moves-proceeds-to-tornadocash/","type":"other","url":""},{"credibility":3,"name":"https://www.certik.com/resources/blog/1IDWJfEBm6GK5sIIdfhfQn-lendhub-incident-analysis","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.theblock.co/post/202047/self-proclaimed-safest-defi-lender-loses-6-million-in-hack","type":"other","url":""},{"credibility":3,"name":"https://coincodecap.com/lendhub-the-safest-defi-lender-loses-6-million-in-a-hack","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/lendhub","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/the-heco-chain-announced-its-official-retirement-urging-users-to-convert-and-redeem-their-assets/","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/lendhub-loses-6m-to-hackers/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://hecochain.medium.com/introducing-lendhub-hecos-fastest-growing-lending-protocol-7716895a06c","type":"other","url":""},{"credibility":3,"name":"https://www.huobi.com/support/en-us/detail/104874608555069","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/1IDWJfEBm6GK5sIIdfhfQn-lendhub-incident-analysis","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-lendhub-hack-january-2023","type":"other","url":""}]}],"sources_used":[{"credibility":2,"name":"Explained: The LendHub Hack (January 2023) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-lendhub-hack-january-2023"},{"credibility":2,"name":"Lendhub Incident Analysis — CertiK","type":"research","url":"https://www.certik.com/resources/blog/1IDWJfEBm6GK5sIIdfhfQn-lendhub-incident-analysis"},{"credibility":1,"name":"Self-proclaimed 'safest' DeFi lender loses $6 million in hack — The Block","type":"news_article","url":"https://www.theblock.co/post/202047/self-proclaimed-safest-defi-lender-loses-6-million-in-hack"},{"credibility":2,"name":"Lendhub protocol exploiters spotted shifting $3.85M into Tornado Cash — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/lendhub-protocol-exploiters-spotted-shifting-3-85m-into-tornado-cash"},{"credibility":2,"name":"Lendhub Exploiter Moves Proceeds to TornadoCash — CryptoPotato","type":"news_article","url":"https://cryptopotato.com/lendhub-exploiter-moves-proceeds-to-tornadocash/"},{"credibility":2,"name":"LendHub loses $6m to hackers — Crypto.news","type":"news_article","url":"https://crypto.news/lendhub-loses-6m-to-hackers/"},{"credibility":2,"name":"LendHub — DefiLlama (TVL and protocol status)","type":"on_chain","url":"https://defillama.com/protocol/lendhub"},{"credibility":2,"name":"Introducing LendHub — HECO Chain Medium","type":"official","url":"https://hecochain.medium.com/introducing-lendhub-hecos-fastest-growing-lending-protocol-7716895a06c"},{"credibility":2,"name":"HECO Chain retirement announcement — Crypto.news","type":"news_article","url":"https://crypto.news/the-heco-chain-announced-its-official-retirement-urging-users-to-convert-and-redeem-their-assets/"},{"credibility":2,"name":"Hackers of Crypto Platform Lendhub Move $3.85 Million Into Tornado Cash — Bitcoinist","type":"news_article","url":"https://bitcoinist.com/lendhub-hackers-move-3-85-million-in-crypto/"}],"summary":"LendHub was a decentralized cross-chain lending protocol operating primarily on the Huobi Eco Chain (HECO) and Binance Smart Chain (BSC). On January 12, 2023, the protocol suffered an approximately $6 million exploit caused by an operational failure to remove a deprecated IBSV cToken from its market, allowing an attacker to drain funds by arbitraging the two coexisting token versions. The protocol's TVL collapsed to near zero following the exploit, stolen funds were laundered through Tornado Cash, and the protocol is no longer considered operational.","timeline":[{"date":"2021-05-06","event":"LendHub launched on Huobi Global and promoted as HECO chain's fastest-growing lending protocol.","source":""},{"date":"2023-01-11","event":"The exploiter received 100 ETH from Tornado Cash on Ethereum and began staging the attack.","source":""},{"date":"2023-01-12","event":"LendHub exploited for approximately $6 million via deprecated IBSV cToken arbitrage vulnerability. TVL collapsed from $6 million to $90,305.","source":""},{"date":"2023-01-13","event":"LendHub acknowledged the exploit via Twitter. SlowMist, CertiK, and Halborn published analyses.","source":""},{"date":"2023-01-12","event":"Over 1,100 ETH (~$1.79 million) transferred to Tornado Cash within hours of the exploit.","source":""},{"date":"2023-02-27","event":"PeckShield and Beosin alert that a further 2,415 ETH (~$3.85 million) was moved to Tornado Cash from the attacker wallet, bringing the total laundered amount to approximately $5.7 million.","source":""},{"date":"2024-11-10","event":"HECO chain announced official retirement; users urged to convert and redeem assets by January 10, 2025.","source":""},{"date":"2025-01-10","event":"HECO chain redemption deadline passed. LendHub TVL reached $0 on DefiLlama; protocol considered effectively defunct.","source":""}]},"v":1}