Tools Crypto Exploit Tracker exploit-0099
Exploit record
Venus Protocol Delegate Phish
- Loss
- $13M
- Attack vector
- Phishing
- Chain
- BNB Chain
- Sector
- Borrowing
What happened
On September 2, 2025, a malicious delegation flow let an attacker borrow and redeem roughly $13M on a user's behalf -- though the funds were later recovered.
The protocol itself was not mathematically broken; the permission model around the victim account was. That is increasingly common: not code failure exactly, but trust granted to the wrong address or contract.
On-chain references
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026