[Purrlend Suffers Security Incident, Losses Approx. $15.2 Million]
According to a statement from Purrlend, a security incident occurred on April 25 during deployments on HyperEVM and MegaETH, resulting in losses of approximately $15.2 million. The attackers compromised the team's 2/3 multi-signature admin wallet, granting malicious EOA accounts permissions such as BRIDGE_ROLE. They then used mintUnbacked to mint unbacked pUSDm and pUSDC, which were used as collateral to borrow assets from the pool. Purrlend stated that the protocol has been suspended, relevant permissions have been revoked, and they are working with security teams, law enforcement agencies, and cross-chain bridge partners to trace and attempt to recover the funds.
