Loopscale Lending

What happened

In late October and early November 2026, Loopscale was targeted by a sustained attack campaign involving more than 30,000 malicious API requests per day, primarily directed at its SOL and USDC Genesis Vaults on Solana. On November 5, the protocol paused operations after detecting an escalation in the activity. Loopscale stated that the affected vaults had been made whole and that no user deposits incurred losses, but did not disclose whether funds had been stolen or explain the attack mechanism. The protocol remained paused pending further investigation and security improvements

Details

Date

Nov 5, 2026

Kind

Hack or exploit

Method

Unknown

How in

Smart contract bug

Target

DeFi protocol or token

Chains

Solana

Sector

Lending (DefiLlama protocol id)

What would have stopped it all controls for this way in

• The audit covers the code that ships, including upgrades and new modules; changed code is reviewed again.
  Check: The deployed bytecode matches the audited commit; a diff since the last audit is empty or reviewed.
• A whitehat Safe Harbor or bounty offer is published before any attack, so a rescuer or an attacker has a set way to return funds.
  Check: The terms and the return address are public and fixed in advance.

General guidance for this kind of attack, not a finding about this incident.

After the theft

Victims reimbursed

yes, amount not stated
“Loopscale stated that the affected vaults had been made whole and that no user deposits incurred losses, but did not disclose whether funds had been stolen or explain the attack mechanism.” (DefiLlama)

How sure: 0 of 4 checks what the checks mean

• Witnessesone source so far
• Same storyneeds a second source
• Blockchain receiptno public attack transaction checked
• Official wordno official statement linked

Who says what

• DefiLlama ↗no figure

Related incidents