What happened
On September 2, 2025, a Venus user lost control of a position worth about $13 million through phishing. Hypernative reported that Venus paused activity and restored the victim's position through a liquidation strategy later that day.
Technical root cause
Phishing induced delegation of a user's position to an attacker-controlled contract.
How it happened
- A malicious Zoom client compromised the user's machine.
- The user was tricked into authorizing the attacker's contract as a delegate, enabling the account drain.
- Following Hypernative's alert, Venus paused withdrawals and used liquidation to contain the attacker and secure nearly $13 million in user assets.
Protocol details
Classification
Borrowing and Lending
Protocol Type
Exploit/Phishing
Protocol links
Website
@VenusProtocol
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
