Venus USDC

Venus USDT

USDC

Venus

Bunni

<p>A BNB Chain-based Venus Protocol user has been drained of about $27 million in a phishing attack, according to on-chain data.</p>
<p>BSC transaction records show that a major account on the platform (<a href="https://debank.com/profile/0x563617b87d8bb3f2f14bb5a581f2e19f80b52008/history" target="_blank" rel="noopener noreferrer nofollow">0x56…2008</a>) was likely compromised. Security firm PeckShield reported on X that the user appeared to approve a malicious transaction, giving the attacker control.&nbsp;</p>
<div class="embedpress-gutenberg-wrapper aligncenter   ep-content-protection-disabled inline" id="ae20ba61-a3a5-43da-af80-d7c40ac151e1">
 <div class="wp-block-embed__wrapper   ">
  <div id="ep-gutenberg-content-79ba291750c2e7ee61a095b57375e376" class="ep-gutenberg-content">
   <div>
    <div class="ep-embed-content-wraper  insta-grid  ">
     <div class="ose-twitter ose-uid-9d311a9be1ec4cb130c2da2aa0180b2f ose-embedpress-responsive" style="width: 100%; height:600px; max-height:600px; max-width:100%; display:inline-block;">
      <blockquote class="twitter-tweet">
       <p><a href="https://twitter.com/hashtag/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#PeckShieldAlert</a> A user of <a href="https://twitter.com/VenusProtocol?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">@VenusProtocol</a> has been drained ~$27M in crypto after falling for a <a href="https://twitter.com/hashtag/phishing?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#phishing</a> scam.<br>The victim approved a malicious transaction, granting token approval to the attacker's address (0x7fd8…202a) for asset transfer. <a href="https://t.co/NwkVlDxxOZ" rel="noopener noreferrer nofollow">pic.twitter.com/NwkVlDxxOZ</a></p>— PeckShieldAlert (@PeckShieldAlert) <a href="https://twitter.com/PeckShieldAlert/status/1962811018268287096?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">September 2, 2025</a>
      </blockquote>
     </div>
    </div>
   </div>
  </div>
 </div>
</div>
<p>Funds were then moved to the attacker’s wallet (0x7fd8…202a), which still shows holdings worth more than $27.1 million.</p>
<p>Most of the stolen funds are in Venus USDT (VUSDT), with over 769 million tokens valued around $19.8 million. Another 276 million Venus USDC (VUSDC), worth about $7.1 million, was also drained. Smaller amounts of Binance-Peg ETH, XRP, and BTCB were included.</p>
<p>PeckShield stressed that this was not a direct exploit of Venus Protocol itself, but rather a wallet-level compromise through phishing. Once approvals are granted, attackers can transfer tokens without further consent, leaving victims little recourse.</p>
<h2 class="wp-block-heading" id="separate-bunni-exploit-costs-2-3m">Separate Bunni Exploit Costs $2.3M</h2>
<p>On the same day, decentralized trading platform <a href="https://www.cryptotimes.io/2025/09/02/bunni-dex-exploiter-drains-2-3m-from-ethereum-pools/" target="_blank" rel="noopener noreferrer nofollow">Bunni suffered a separate breach worth about $2.3 million</a>.</p>
<p>Blockchain security firm BlockSec flagged the incident, pointing to flaws in Bunni’s Ethereum-based smart contracts. The stolen funds were traced to wallet ‘0xE04…64f2b,’ which currently holds roughly $1.33 million in USDC and $1.04 million in USDT. The exact attack method has not yet been disclosed.</p>
<p>Both the Venus phishing scam and the Bunni exploit highlight the biggest dangers in DeFi users falling for scams and loopholes in smart contracts. With more money flowing into the space, these threats aren’t going away anytime soon.&nbsp;</p>
<p style="background-color:#f2f2f2"><em>Note: This is a developing story. More details are anticipated.</em></p>
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
 <p>Also Read: <a href="https://www.cryptotimes.io/2025/09/01/certik-flags-suspicious-activity-in-olaxbts-aio-tokens/" target="_blank" rel="noopener noreferrer nofollow">CertiK Flags Suspicious Activity in OLAXBT’s AIO Tokens</a></p>
</blockquote>

Venus Protocol User Drained of $27M in Phishing Scam

Table of Contents

The Crypto Times

Other articles published on Sep 2, 2025

Join our free newsletter for daily crypto updates!