Digital Asset
Intelligence
Security Incident · zkSync Ecosystem

Eralend Flash Loan Attack: $2.76M Reported Loss

·Historical incident record

Incident Overview

On July 25th, according to reports from several users, Eralend, the lending protocol on Zksync, was attacked by lightning loans, and it is currently unable to borrow, but it can be proposed temporarily. On July 26, EraLend released the progress of the attack. EraLend stated that the attacker manipulated the price of the oracle machine, resulting in the USDC mining pool being used for about 2.76 million US dollars. All other pools remain safe and unaffected. The attackers used multiple bridges to spread the exploited funds across multiple wallets on various chains.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    SyncDex

    Attack methodRug Pull
    Reported loss$370,000
  2. Incident date
    Attack methodRug Pull
    Reported loss$ 510,000
  3. Incident date
    Target

    zkSync

    Attack methodDowntime
    Reported lossNot disclosed
  4. Incident date
    Target

    IEGT

    Attack methodRug Pull
    Reported loss$ 1,140,000
  5. Incident date
    Target

    MetaLabz

    Attack methodContract Vulnerability
    Reported loss400 BNB