- Venus Protocol, the largest lending platform on BNB Chain, suffered a complex exploit on March 18, 2026, resulting in millions in losses for both the protocol and the attacker.
- The Hacker spent nine months planning the attack, accumulating the THE token via Tornado Cash, manipulating its price as collateral, and borrowing nearly $15 million.
- Despite the large-scale borrowing, on-chain analysis shows the attacker lost $4.7 million after liquidations, while the protocol was left holding $2.1 million in bad debt.
- The attack vector was previously identified in a 2023 audit but dismissed as having no negative side effects.
In a twist that defies the typical DeFi hack narrative, Venus Protocol was exploited on Sunday in a meticulously planned, months-long attack that ultimately lost the perpetrator nearly $5 million on-chain, according to analysis by audit firm BlockSec. The incident highlights the strange economics of sophisticated blockchain exploits, where apparent short-term gains can mask deeper financial losses.
The hacker methodically accumulated Thena’s THE token over nine months, using it to surpass the protocol’s supply cap. Consequently, they artificially inflated the token’s valuation as collateral, enabling them to borrow assets worth approximately $15 million.
However, the on-chain reality was grim for the attacker. BlockSec’s analysis calculated the hacker invested $9.92 million and retained only around $5.2 million post-liquidation. This resulted in a net loss of roughly $4.7 million, according to their tweet.
Meanwhile, Venus Protocol was left with $2.1 million in bad debt. Researchers at Allez Labs noted the attack method, detailed in their technical post mortem, had been flagged in a past audit but dismissed as having “no negative side effects.”
This is far from the protocol’s first security incident. In 2025, Venus paused after a user fell for a phishing scam, and a governance vote was held to recover funds. It has also faced bad debt from an oracle manipulation attack and volatility from the Luna meltdown and BNB Bridge hack.
✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
