Venus Protocol pauses after user loses funds in suspected phishing attack
Quick Take Venus Protocol paused markets after a whale lost an estimated $13.5 million in a suspected phishing attack. Security firms say the victim approved a malicious address. The DeFi lender states that the protocol itself remains unaffected pending further checks.
A large user of Venus Protocol, a decentralized finance lender, was drained of about $13.5 million after apparently signing a malicious transaction that granted token approvals to an attacker, blockchain security firms said on Tuesday.
Responding to the incident, Venus has paused its platform pending an investigation. “We are aware of the suspicious transaction and are actively investigating,” the team wrote on X. “Venus is currently paused following security protocols.”
PeckShield said the victim “approved a malicious transaction,” allowing address “0x7fd…6202a” to transfer assets out of the wallet. CertiK added that the wallet had called an updateDelegate function to approve the attacker before funds were siphoned, sharing a transaction record on BNB Chain.
Also, Venus Protocol moderators told users in a Telegram message that the protocol itself “remains untouched,” though engineers are double-checking to be sure. "To clarify, Venus Protocol has NOT been exploited. A user has been attacked. Smart contract is safe," the project's X account shared amid speculation that the platform itself was exploited.
Launched in 2020, Venus Protocol is a decentralized lending market best known for its deployment on BNB Chain and additional rollouts on Ethereum, opBNB, Arbitrum, Optimism, and zkSync. It lets users supply collateral, borrow assets, and mint the VAI stablecoin, with governance via the XVS token. XVS fell as much as 9% amid the issue, before slightly recovering as of writing, Tradingview data shows.
Venus XVS token falls after a phishing scammer exploits a user. Image: TradingView
The suspected attack vector echoes a common issue in DeFi failure. Phishing scammers trick users into signing token approvals that let third parties move assets. Once granted, those allowances can be used to drain funds until permissions are revoked. According to blockchain security firm CertiK's mid-year report , phishing attacks accounted for $410 million in losses from crypto users in the first half of 2025 across 132 incidents. A separate report from Hacken , another Web3 security firm, estimates $600 million in losses specifically from phishing and social engineering schemes during the same period.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
"Crypto bull" Tom Lee: The crypto market correction may be nearing its end, and bitcoin is becoming a leading indicator for the US stock market.
"Crypto bull" Tom Lee stated that on October 10, an abnormality in the cryptocurrency market triggered automatic liquidations, resulting in 2 million accounts being liquidated. After market makers suffered heavy losses, they reduced their balance sheets, leading to a vicious cycle of liquidity drying up.

Besant unexpectedly appears at a "Bitcoin-themed bar," crypto community "pleasantly surprised": This is the signal
U.S. Treasury Secretary Janet Yellen made a surprise appearance at a bitcoin-themed bar in Washington, an act regarded by the cryptocurrency community as a clear signal of support from the federal government.

Solana founder shares eight years of behind-the-scenes stories: How he recovered from a 97% crash
What doesn’t kill it makes it legendary: How Solana was reborn from the ashes of FTX and is now attempting to take over global finance.

What’s next for the strongest altcoin of this round, ZEC?
There is a fierce debate between bullish and bearish views on ZEC.

