Bitcoin

Security

Venus

would

Quick Breakdown:
<ul>
 <li style="font-weight: 400;">Venus Protocol has recovered $13.5 million lost after a whale wallet fell victim to a phishing attack.&nbsp;</li>
 <li style="font-weight: 400;">The protocol paused operations and leveraged governance powers to liquidate attacker positions, fully restoring assets and stabilizing its token XVS.</li>
 <li style="font-weight: 400;">This rare recovery highlights risks of social engineering and sparks centralized crisis management debates.</li>
</ul>
Venus Protocol successfully recovered $13.5 million stolen in a high-profile phishing attack that compromised a whale wallet, the platform <a style="color: #0000ff;" href="https://x.com/venusprotocol/status/1963017766098907282?s=46&amp;t=nznXkss3debX8JIhNzHmzw" rel="noopener noreferrer nofollow">confirmed</a> on September 3. The incident exposed a critical vulnerability not in its smart contracts, but in user security, emphasizing ongoing risks from social engineering attacks in the DeFi sector.
<blockquote class="twitter-tweet">
 Update: Venus Protocol has been fully restored (withdrawals and liquidations resumed) as of 9:58PM UTC. <img src="https://s.w.org/images/core/emoji/16.0.1/72x72/2705.png" alt="✅" style="height: 1em; max-height: 1em;">
 The lost funds have been recovered under Venus’ protection. <img src="https://s.w.org/images/core/emoji/16.0.1/72x72/2705.png" alt="✅" style="height: 1em; max-height: 1em;"> <a href="https://t.co/y2uUwPqmtb" rel="noopener noreferrer nofollow">https://t.co/y2uUwPqmtb</a>
 — Venus Protocol (@VenusProtocol) <a href="https://twitter.com/VenusProtocol/status/1963017766098907282?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">September 2, 2025</a>
</blockquote>

On September 2, a prominent Venus user unknowingly approved a malicious transaction, resulting in the loss of an estimated $13.5 million in assets, including wrapped Bitcoin (BTCB), vUSDT, vUSDC, vXRP, and vETH. Initial loss estimates were nearly double but later adjusted to account for the user’s debt position, according to security analysts.
<h3 id="span-style-font-weight-400-how-has-venus-responded-span">How has Venus responded?</h3>
Venus responded immediately by halting protocol activity to freeze the attacker’s ability to move or liquidate stolen funds. This pause created a critical window for an emergency governance vote, approved by the community, to forcibly liquidate the attacker’s positions and prevent fund obfuscation or bridging.
Security firm PeckShield verified full restoration of the assets by September 3, as transactions on the BNB Chain reflected the funds returning to protocol reserves. Venus resumed normal operations later that day after completing thorough security checks.
Venus emphasized that while the protocol’s core contracts remained uncompromised, phishing attacks continue to threaten users, as attackers exploit human error through deceptive websites and pop-ups rather than targeting code vulnerabilities.
This incident serves as a stark reminder that, despite technical security, decentralized platforms must fortify social engineering defences and consider the balance between rapid crisis response and decentralization principles. Venus plans to release a detailed post-mortem report to inform the community and improve future safeguards.
Notably, in <a style="color: #0000ff;" href="https://defi-planet.com/2025/09/crypto-hacks-surge-in-august-with-163m-lost-peckshield-reports/" rel="noopener noreferrer nofollow">August</a> 2025, a total of $163 million was lost to crypto hacks and exploits, marking a 15% increase from the previous month. The primary causes were private key theft, compromised signers, and social engineering, with the largest single loss being a $91.4 million Bitcoin robbery.
&nbsp;
If you would like to read more articles like this, visit<a style="color: #0000ff;" href="https://defi-planet.com/" rel="noopener noreferrer nofollow"> DeFi Planet</a> and follow us on<a style="color: #0000ff;" href="https://twitter.com/PlanetDefi" rel="noopener noreferrer nofollow"> Twitter</a>,<a style="color: #0000ff;" href="https://www.linkedin.com/company/defi-planet/" rel="noopener noreferrer nofollow"> LinkedIn</a>,<a style="color: #0000ff;" href="https://www.facebook.com/DeFi-Planet-129907662611402" rel="noopener noreferrer nofollow"> Facebook</a>,<a style="color: #0000ff;" href="https://www.instagram.com/defi.planet/" rel="noopener noreferrer nofollow"> Instagram</a>, and<a href="https://coinmarketcap.com/community/profile/DeFiPlanet/" rel="noopener noreferrer nofollow"> CoinMarketCap Community</a>.
Take control of your crypto&nbsp; portfolio with MARKETS PRO, DeFi Planet’s suite of analytics tools.”
The post <a href="https://defi-planet.com/2025/09/venus-protocol-recovers-13-5m-after-phishing-attack/" rel="noopener noreferrer nofollow">Venus Protocol Recovers $13.5M After Phishing Attack</a> appeared first on <a href="https://defi-planet.com" rel="noopener noreferrer nofollow">DeFi Planet</a>.

Venus Protocol Recovers $13.5M After Phishing Attack

Table of Contents

DeFi Planet

Other articles published on Sep 3, 2025

Join our free newsletter for daily crypto updates!