Ethereum Heist: zkLend’s $9.5M Blunder Sparks Comedy of Crypto Errors

zkLend suffered a heist with hackers exploiting a smart contract flaw, swiping 3,600 Ethereum worth $9.5 million. Now, zkLend is playing a high-stakes game of crypto “Let’s Make a Deal,” offering the hacker 10% of the loot if they return the rest. It’s like a digital Robin Hood, but with more math errors.

Pro Dashboard

Hot Take:

Well, it looks like zkLend just got hit by a classic case of “Oops, I did it again!” But instead of a pop song, it’s a financial nightmare brought on by a sneaky hacker with a penchant for rounding errors. Who knew that a simple decimal place could cause a $9.5 million headache? It’s like losing a fortune because you forgot to carry the one. Maybe zkLend should consider hiring a math teacher instead of a cybersecurity expert. Just saying.

Key Points:

  • zkLend, a decentralized money lender on Starknet, suffered a breach losing 3,600 Ethereum.
  • The breach exploited a rounding error bug in the smart contract’s mint() function.
  • Starkware confirmed the flaw was application-specific, not Starknet-related.
  • zkLend offers the hacker a 10% bounty if they return 90% of the stolen funds.
  • Legal action is promised if the hacker doesn’t comply by February 13th.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?