Loopscale Faces API Exploit Attempt with No User Losses
Loopscale, a Solana lending protocol, experienced a campaign of malicious API requests. The protocol was paused, and no user deposits were lost during the incident.
In early November 2026, the Solana lending protocol Loopscale encountered a series of high-volume malicious API requests. Attackers took advantage of misconfigured asset-pricing parameters to attempt undercollateralized loans and disproportionate redemptions from the SOL and USDC Genesis Vaults. The situation prompted the team to take action to protect user funds.
On November 5, the Loopscale team paused the protocol to address the ongoing exploit. They confirmed that the affected vaults were made whole and that there were no losses to user deposits. The team is also coordinating with law enforcement regarding the incident. This proactive response aimed to mitigate any potential impact on users and maintain the integrity of the protocol.