Hack history / 2025 / Hack or exploit
zkLend
Hack or exploit on Feb 11, 2025 · First Depositor Attack
SOURCES AGREE ON DATE AND LOSS · 4 SOURCES
Lost
$9.6M
dollars at the time
Returned
none listed
as the sources state it
Rank
#312
among thefts by dollars lost
What happened
zkLend lost $9.57M on February 11, 2025 on Starknet via an integer division rounding vulnerability. Attacker exploited truncated rounding in withdrawal calculations with precise wstETH deposits to inflate their raw_balance to 1724, draining all tokens from other pools. Attacker returned ~$3.2M after negotiation but lost remaining to a Tornado Cash scam.
Details
- Date
- Feb 11, 2025
- Kind
- Hack or exploit
- Method
- First Depositor Attack
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Starknet
After the theft
- Returned by the attacker
- $3.2M
“Attacker returned ~$3.2M after negotiation but lost remaining to a Tornado Cash scam.” (DefiLlama)
Cite this page
SwanBluechip, "zkLend hack, Feb 11, 2025: $9.6M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht2ac250a903/ (data as of 2026-10-31).