Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·ruTzUu…HPbMSummary
zkLend was a decentralized money-market lending protocol built on Starknet (Ethereum Layer 2), founded in 2022 by Brian Fu and Jane Ma and backed by Delphi Digital, Three Arrows Capital, and StarkWare. On February 11–12, 2025, the protocol suffered a critical flash-loan exploit that drained approximately $9.57 million in user funds through manipulation of the lending_accumulator variable and precision-loss rounding errors. The protocol permanently ceased operations in June 2025, allocating a $200,000 treasury remnant to a user recovery fund — leaving the vast majority of affected users uncompensated.
Connected Entities
1 entities- + 1 more
Timeline(12 events)
February 2022
zkLend founded by Brian Fu and Jane Ma
29 March 2022
zkLend raises $5 million seed round led by Delphi Digital, with Three Arrows Capital, StarkWare, Alameda Research, and others participating
July 2022
zkLend testnet opens
25 July 2023
EraLend hack occurs (~$2.76 million loss); SlowMist later alleges the same attacker is responsible for the subsequent zkLend exploit
19 October 2023
zkLend officially launches on Starknet mainnet with Artemis and Apollo environments
11 February 2025
zkLend exploit begins; attacker manipulates wstETH market lending_accumulator via flash loans and rounding errors, draining approximately $9.57 million in ETH, USDC, STRK, and USDT
12 February 2025
zkLend suspends all withdrawals; publicly discloses exploit and offers 10% white hat bounty (~3,300 ETH) with February 14 deadline
14 February 2025
Attacker ignores white hat bounty deadline; funds not returned
14 February 2025
Stolen funds bridged to Ethereum; attacker attempts Railgun laundering — rejected by Railgun compliance policies, funds returned to attacker address
5 March 2025
zkLend opens Recovery Portal for affected users; compensation plan announced including ~82,818 recovery NFTs
31 March 2025
Attacker posts on-chain message to zkLend admitting to losing 2,930 ETH (~$5.4 million) to a fake Tornado Cash phishing site (tornadoeth.cash) while attempting to launder funds
25 June 2025
zkLend announces permanent shutdown of operations; cites hack fallout and ZEND token delistings from Bybit and KuCoin; allocates remaining $200,000 treasury to user recovery fund
Decision Log
- hash: 5uQVG3QykBYicCqYxRy5oLdCuFCBsEjgaKvM4VdqFvMz
This investigation is cryptographically anchored to the Solana blockchain (1 event). 17 of 24 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:25 AM
last updated: 9/1/2026, 3:39:50 AM
avoid.net — verified advice for a post-truth world