purrlend

Purrlend announced that it encountered a security incident during the deployment of HyperEVM and MegaETH, resulting in a loss of approximately $1.52 million.The attacker breached the team's 2/3 multi-signature wallet, granting permissions such as BRIDGE_ROLE to a malicious EOA, and minted unbacked pUSDm and pUSDC through mintUnbacked, using them as collateral to borrow assets from the pool. Purrlend stated that it has suspended the protocol, revoked related permissions, and is working with security teams, law enforcement, and cross-chain bridge partners to track and attempt to recover the funds.

According to The Street, the lending protocol Purrlend was attacked on the MegaETH and HyperEVM networks, resulting in a loss of approximately $1.52 million.The attacker extracted about $1.2 million in assets from the HyperEVM network, including 449,683 USDC, 214,125 USDT, 194,745 USDH, as well as some UBTC, wstHYPE, UETH, kHYPE, and WHYPE. The attacker also extracted about $324,000 in assets from the MegaETH network, including USDT, WETH, and USDm.Currently, Purrlend has suspended the protocol and launched an investigation, and the attacker's address has been identified in the block explorers of both networks.