What happened
Quick Summary
The LendHub lending protocol on the Heco network was exploited for about $6M USD.
Details of the Exploit
The vulnerability was in lBSV contract duplication. Both versions of it were active, thus the hacker after depositing to the old version was able to borrow in the new market. It allows the flow of the minting and redemption process to be exploited and brings a profit worth 6M USD.
After that, the attacker started bridging assets to other chains like Ethereum and Optimism.
Block Data Reference
Scammer address:
https://www.hecoinfo.com/en-us/address/0x9d0163e7…53ab03?tab=Transactions
Case & protocol details
Classification
Borrowing and Lending
Protocol Type
Lending
Affected asset / contract
LHT
Official Website
www.lendhub.online/en
Protocol Twitter/X
@LendHubDefi
Evidence & learning
Sources and on-chain records
- report Report twitter.com
- report Report twitter.com
- report Report crypto.news
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.