Purrlend: Security incident caused by administrator multisig breach, resulting in a loss of approximately $1.52 million

ChainCatcher reports that Purrlend stated it experienced a security incident during deployment on HyperEVM and MegaETH, resulting in a loss of approximately 1.52 million US dollars.

The attacker breached the team's 2-out-of-3 admin multisig wallet, granted BRIDGE_ROLE and other privileges to a malicious EOA, and used mintUnbacked to mint unbacked pUSDm and pUSDC, which were used as collateral to borrow assets from the pool. Purrlend stated that the protocol has been paused, relevant permissions revoked, and it is currently working with the security team, law enforcement agencies, and cross-chain bridge partners to trace and attempt to recover the funds.