Loopscale paused its Solana lending protocol today. Its APIs had been eating 30,000+ malicious requests a day for a week.
The target was its older SOL and USDC Genesis vaults. Loopscale says all deposited funds are secured, the affected vaults were made whole, and no users lost money. It hasn't said how much was hit or how the attacker tried to get in.
It flagged four addresses, two Solana and two EVM-style, and says it's working with federal law enforcement. Priority one is turning repayments back on, since borrowers who can't repay can still get liquidated.
Same protocol lost about $5.8M in April 2025 and got it back by paying a 10% bounty. This time it shut the gate before the bill arrived.
Source: crypto.news