Starknet-based zkLend seeks return of over $8 million in ETH stolen from platform

Starknet-based lending protocol zkLend has publicly acknowledged it was hacked for over $9 million.

It asked the hacker to keep 10% of the stolen funds as a “white hat” reward while asking for the return of the remaining 90%, which amounts to 3,300 ETH ($8.4 million).

ZkLend suspended withdrawal functions following the exploit to mitigate further risks and the team is investigating the exploit’s root cause.

To resolve the situation by negotiating with the hacker, zkLend wrote a message to the attacker, stating it wouldn’t take legal action if the attacker returned these funds.

“Upon receiving the transfer, we agree to release from any and all liability regarding the attack,” it wrote in an onchain message to the hacker's wallet.

The specifics of how the zkLend hack was executed are still under investigation. However, based on general patterns observed in similar DeFi hacks, the perpetrator might have exploited a vulnerability within the smart contract code to drain funds.

ZkLend added it was actively tracking the funds and pursuing the identification of the hacker in collaboration with other teams.