Venus THE exploit analysis
Venus THE's liquidation bonus was priced from a thin XVS spot pool that the attacker manipulated via flash-loan. DeFiHackLabs reconstructs the on-chain liquidateBorrow drain.
- Reported loss
- 913,858.263360521396654198 CAKE + 1,972.530910582753621682 WBNB, per DeFiHackLabs
- Occurred
- Logged
- Source
- DeFiHackLabs
Logged as “2026-03-15: Borrowbehalf Donation Attack on Venus THE”.
Analysis1 min read
Venus THE's Comptroller had a liquidateBorrow path that credited the liquidator with the borrower's collateral against a thin XVS pool whose price was already manipulated. The attacker prepared the thin pool flash-loan trade, then called liquidateBorrow and walked the bonus out.
DeFiHackLabs reconstructs the sequence against the live BNB Chain state; total loss is captured in the PoC.
What would have prevented it: a liquidation bonus priced against a TWAP-protected oracle, not the spot price of a thin XVS pool.
Other exploits
- Revamp exploit analysis 19 Mar 2026
- Fun.xyz CheckoutPool exploit analysis $86K
- StakeOnMe exploit analysis 15 Mar 2026
- AlkemiEarn exploit analysis 10 Mar 2026
- Curve LlamaLend exploit analysis 2 Mar 2026
- LAXO Token exploit analysis 22 Feb 2026
Query every incident yourself — free, no signup
Updated 14 Oct 2026. Figures are as reported by the sources listed above and are not independently verified.
The crypto data layer for humans, apps, and AI agents.
