Lava Hack

TOTAL LOST $340K
Low Flash Loan Attacks arbitrum

What happened

Quick Summary

LavaLending experienced a flash loan exploit resulting in the theft of approximately $340K worth of various cryptocurrencies.

Details of the Exploit

LavaLending fell victim to a flash loan exploit, resulting in the unauthorized transfer of funds totaling approximately $340K. The stolen cryptocurrencies include 60,349 USDT, 8.5 wstETH, 96,215 UDSC.e, 77,477 USDC, and 20.3 ETH. These funds were sent to the address 0xfbcdb6ce…0a6428 on the Arbitrum network.

In response to the incident, all lending markets on the platform have been temporarily paused while an investigation is conducted to determine the extent of the breach and identify the perpetrators.

Block Data Reference

Exploiter:

https://arbiscan.io/address/0x851aa754…530418

https://arbiscan.io/address/0xfbcdb6ce…0a6428

Expliter contract:

https://arbiscan.io/address/0x42fae472…c88988

https://arbiscan.io/address/0x3e52c217…e9fda1

Case & protocol details

Classification Protocol Logic / Borrowing and Lending
Protocol Type Lending
Smart Contract Language Solidity
Official Website www.lava.ag/
Protocol Twitter/X @LavaLending

Evidence & learning

Attack pattern

Compare incidents →
Flash Loan Attacks

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes