Tools Crypto Exploit Tracker exploit-0129
Exploit record
zkLend Exploit
- Loss
- $10M
- Attack vector
- Other
- Chain
- Starknet
- Sector
- Borrowing
What happened
On February 12, 2025, zkLend lost about $9.5M in a flash-loan exploit on Starknet. The attacker later attempted to launder through Railgun but funds were flagged and partially recovered.
The protocol still failed first. The partial recovery narrative is interesting, but it came after the money had already been stolen. BlockSec published a detailed post-mortem clarifying several misunderstandings about the attack mechanics.
On-chain references
- Ethereum Return Addressetherscan.io/address/0xCf31e1b97790afD681723fA1398c5eAd9f69B…
Sources
- zkLend official post-mortemmedium.com/zklend/zklend-security-incident-post-mortem-27d9a…
- BlockSec detailed analysisblocksec.com/blog/zklend-exploit-post-mortem-unraveling-the-…
- Halborn analysiswww.halborn.com/blog/post/explained-the-zklend-hack-february…
On YFarmX
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026