Venus Protocol on BNB Chain Hit by Suspected $27M Exploit

Venus Protocol, a lending platform on the BNB Chain, was exploited, with attackers draining an estimated $27 million in assets. The attack involved updating a contract to a malicious address, affecting tokens like vUSDC and vETH. Security teams are tracking the stolen assets, and the Venus community has not yet released an official statement.

Venus Protocol, a prominent lending platform on the BNB Chain, has been the target of a significant security incident. On September 2nd, 2025, an estimated $27 million in assets were drained from the platform, including vUSDC and vETH tokens. The attack involved updating the core pool controller contract to a malicious address, highlighting potential vulnerabilities in DeFi protocols.

The incident was first reported by Cyvers Alerts, a blockchain security platform, which noticed a suspicious transaction of $27 million on the Venus Protocol within the BNB network. The malicious contract address accessed the Venus core pool controller, leading to the unauthorized transfer of assets [2].

The exploit has raised concerns within the DeFi community, as it underscores the persistent risks faced by decentralized finance platforms. This incident follows a pattern of recurring vulnerabilities in DeFi protocols, as seen in past exploits like the 2021 Oracle manipulation [3].

Venus Protocol has yet to release an official statement regarding the incident. However, security teams are actively tracking the stolen assets, and community discussions have centered around the need for enhanced security measures. The exploit has also sparked increased scrutiny and regulatory interest in digital asset security practices.

The Venus Protocol exploit serves as a stark reminder of the inherent risks in the DeFi space. As the industry continues to evolve, it is crucial for both protocols and users to prioritize security, transparency, and education to build a more resilient and trustworthy digital financial future.

References
[1] https://bitcoinworld.co.in/venus-protocol-exploit-security/
[2] https://www.lookonchain.com/feeds/27326
[3] https://coincu.com/news/venus-protocol-27-million-exploit/