DeFi lender loses $3.7M in exploit

TLDR

Venus Protocol, a DeFi lending platform on BNB Chain, was exploited for about $3.7 million via a manipulation of its supply cap and collateral system.

1. An attacker accumulated most of Thena (THE) supply, then used it as collateral on Venus to borrow assets worth roughly $3.7 million.
2. The exploit relied on low-liquidity collateral and weaknesses in Venuss supply cap controls, a pattern seen before in DeFi lending attacks.
3. Venus paused markets involving THE and some low-liquidity tokens while investigating, and users should watch for post-mortems, governance changes, and any recovery efforts.

Deep Dive

1. What Happened To Venus

Reports indicate that Venus Protocol on BNB Chain suffered about $3.7 million in losses after an attacker abused markets linked to Thena (THE), a DeFi token on the same network.

According to on-chain analysis summarized by media, the attacker accumulated roughly 84% of THEs total market cap, then used those tokens as collateral on Venus to borrow CAKE, USDC, BNB, and Bitcoin, draining value from the protocols pools. The incident is described as a supply cap attack.

Venus has acknowledged unusual activity in the THE pool and framed the incident as a supply cap manipulation rather than an oracle failure.

2. How The Exploit Worked

This was not a traditional smart contract bug, but a design-level issue in how Venus handled supply caps and collateral for a thinly traded token.

By controlling most of THEs circulating supply and liquidity, the attacker could push its price and bypass effective supply limits, making the collateral look much safer than it really was. Once the system accepted this inflated collateral, borrowing against it allowed the attacker to exit with more stable or liquid assets.

3. Protocol Response And User Impact

Venus has paused borrowing and withdrawals for THE markets and, out of caution, also halted some other low-liquidity markets while investigation continues, but major markets reportedly remain open.

For users, the direct impact is highest if you were supplying or borrowing in the affected THE and related pools, where actions are restricted until Venus finalizes its response.

Key things to watch are: an official post-mortem, whether any bad debt is socialized across the protocol, changes to listing criteria for new collateral, and tighter supply caps or liquidity requirements.

Conclusion

The Venus exploit shows that DeFi lending risk is not only about smart contract bugs, but also about collateral design and liquidity assumptions. Concentrated ownership of a thinly traded token allowed an attacker to turn nominally safe parameters into a $3.7 million loss. Going forward, the main signals to track are how Venus and similar platforms tighten collateral rules and whether they reduce exposure to long-tail, low-liquidity assets.