Safe

Solana

DeFi

USDC

Passive Income

Solana DeFi protocol Loopscale lost over $5.8 million, roughly 12% of its Total Value Locked (TVL), to a cyber exploit.&nbsp;The platform is still investigating how the attack happened, trying to identify the hackers involved and how they can retrieve the stolen funds. They are currently coordinating with law enforcement and security personnel to resolve the situation quickly.In an X post, the platform briefed its users on what it believes to be the main cause of the attack. Loopscale <a href="https://x.com/LoopscaleLabs/status/1916230435291713786" rel="noopener noreferrer nofollow">remarked,</a>“The root cause of the exploit has been identified as an isolated issue with Loopscale’s pricing of RateX-based collateral. There is no issue with RateX itself related to this. Loss of funds explicitly affects depositors to SOL and USDC Genesis vaults.”<h3 id="span-loopscale-allows-some-functions-while-restricting-others-span">Loopscale allows some functions while restricting others</h3>Attackers manipulated the RateX PT token pricing functions, draining 1200 SOL and $5.7 million USDC from the platform’s vaults.&nbsp;Soon after the attack, Loopscale closed off its markets temporarily. However, after a few hours, the protocol reactivated loan repayments, top-ups, and loop closing, while other application functions, like vault withdrawals, remained restricted.The attack mostly affects Loopscale <a href="https://www.cryptopolitan.com/circle-usdc-60-billion-market-capitalization/" rel="noopener noreferrer nofollow">USDC</a> and SOL vault depositors, not necessarily borrowers or loopers on the platform. However, Loopscale has promised to reveal how many users were specifically affected, how holders will withdraw from their vaults, and a technical post-mortem.Before the attack, OShield, which audited the protocol in January and February of this year, identified several vulnerabilities. The project later posted on its FAQ that all high-risk issues had been resolved. Currently, there is still an ongoing audit by Sec3 on the protocol.Loopscale, only launched two years ago, on April 10, introduced a unique order book-based lending model to structure modular loans, providing more predictable terms and minimizing rate volatility. The protocol features fixed-rate, fixed-duration, and multi-asset borrowing, earning the support of major crypto companies like CoinFund, Jump Capital, and Solana Ventures. In 2021, the project, then called Bridgesplit, a proposed NFT yield product, secured about $4.25 million in VC funding from Solana Labs, Coinbase Ventures, and others.<h3 id="span-the-crypto-industry-has-lost-billions-of-dollars-to-exploits-since-the-start-of-2025-span">The crypto industry has lost billions of dollars to exploits since the start of 2025</h3>A price manipulation on Oracle earlier this month led to the loss of $7 million for KiloEX. The platform is still planning to compensate affected users based on their resume time.The perpetual futures DEX, however, said that only trades that stayed open throughout the platform’s 10-day pause would be eligible for compensation. Moreover, per a Thursday <a href="https://medium.com/kiloex/kiloex-resoluton-plan-for-users-affected-by-the-security-incident-50a7c5891fed" rel="noopener noreferrer nofollow">blog post,</a>&nbsp;participants were advised to close positions once KiloEX resumes to receive full value.Aside from the KiloEX attack, Bybit was hacked for $1.46 billion in February. The attack beats all previous record hacks, including Coincheck’s 2018 hack, when they lost $534 million, and Mt. Gox’s 2014 hack, with $470 million drained.North Korea’s <a href="https://www.cryptopolitan.com/lazarus-group-north-korea-nuclear-crypto/" rel="noopener noreferrer nofollow">Lazarus group</a> is suspected of hacking Bybit after the exchange announced they traced the attack to malicious JavaScript code served from a compromised Safe AWS S3 bucket and claimed the breach originated outside its platform.As of Q1 2025, over $1.6 billion was lost in DeFi attacks. Platforms like zkLend, Ionic Money, Cardex, Four.Meme, Cashverse, BankX, and GoldReserve NFT have seen their funds drained. In February alone, the crypto industry had lost over $1.53 billion in 9 attacks, a 20% surge from January and an 18x increase from February 2024.Cryptopolitan Academy: Tired of market swings? Learn how DeFi can help you build steady passive income. <a href="https://www.cryptopolitan.com/free-defi-web-class-coming-soon/?utm_source=cryptopolitan&amp;utm_medium=banner&amp;utm_campaign=defi-waitlist" rel="noopener noreferrer nofollow">Register Now</a>

Solana DeFi protocol Loopscale hacked for $5.8M

Table of Contents

Cryptopolitan_News

Other articles published on Apr 27, 2025

Get In the Conversation: Zloadr’s Direct Messaging Lets You Chat with Traders & Devs in Real-Time

Ethereum Prepares to Bounce Back After Bottoming Out, Analyst Highlights Bullish Pennant with $8,...

Ripple’s RLUSD Would Use XRP and Boost Liquidity

Pi Network Suspension: Banxa Pulls Back on Pi Coin as Binance Listing Criteria Offer a Glimmer of...

ProShares Trust to Launch XRP ETFs on April 30 on SEC Approval

OM Slides, Celestia Builds — Cold Wallet’s $0.007 Presale Quietly Becomes April’s Hottest Move

Join our free newsletter for daily crypto updates!