BlockBeats News, March 16, Venus Protocol released a follow-up on the abnormal activity in THE liquidity pool. In addition to previously suspending THE borrowing and withdrawals, the collateral factor (CF) for 7 markets has now been reduced to 0 as a preventive measure targeting markets where a single user holds an excessively high proportion of collateral. The 7 markets are BCH, LTC, UNI, AAVE, FIL, TWT, and lisUSD, while all other markets remain unaffected and continue normal operations.
The initial assessment of the attack method indicates that starting from June 2025, the attacker slowly accumulated THE tokens through normal deposit processes, eventually holding 84% of the supply cap (approximately 12.2 million THE). Yesterday, the hacker directly transferred THE tokens into the protocol contract, instantly boosting the supply to create massive collateral. By performing recursive loop price manipulation, leveraging the extremely low on-chain THE liquidity combined with TWAP oracle delays, the hacker initiated a cycle: depositing THE, borrowing other assets, using the borrowed assets to buy more THE on-chain, waiting for the TWAP oracle to update and pushing up the price.
Venus stated that it remains committed to transparency and will release a full report after the investigation concludes.
