Loopscale Pauses Solana Lending After Week of Attacks on Its Vaults

Loopscale has frozen deposits and withdrawals after a week-long assault on its Genesis Vaults while the Solana lending protocol investigates who was responsible and how the attacks unfolded.

Loopscale announced on November 5 that it had paused all protocol activity. It had been absorbing more than 30,000 malicious API requests a day for roughly a week, aimed squarely at the SOL and USDC Genesis Vaults that sit at the center of its lending markets. Loopscale said the affected vaults have been fully replenished and that user deposits suffered no losses. The team published four wallet addresses linked to the attacks and said it is working with federal law enforcement and security specialists. Normal operations will remain suspended until the attack's scope is understood and additional safeguards are in place, although Loopscale plans to restore its interface and repayment functions sooner to reduce liquidation risks.

That's a strange kind of crisis. Usually a DeFi hack means a headline number: millions gone, a bridge drained, a token in free fall. Here, Loopscale is shutting itself down pre-emptively, against an attack that by its own account didn't actually take anyone's money. Is that prudence, or an admission that the team doesn't yet know what it's dealing with? Loopscale hasn't said which.

These same vaults have burned it before. In April 2025, an attacker exploited a flaw in how the protocol validated pricing for RateX principal tokens used as collateral. The attacker drained roughly 5.7 million USDC and 1,211 SOL, about $5.8 million combined, in minutes. That single exploit represented around 12% of the protocol's total value locked at the time, according to reporting from The Block and Halborn's post-incident writeup. Loopscale ultimately restored all affected funds after an on-chain negotiation in which the attacker agreed to return assets in exchange for a bounty, and withdrawals reopened on May 8.

So when the same vaults become the target again a year and a half later, it's fair to ask whether Loopscale's architecture, not just its luck, is the problem. The company has said this second incident is different in kind: a volumetric assault on its API rather than a pricing exploit on its smart contracts. But a reader doesn't need to parse the distinction too finely to notice that "Genesis Vaults" keeps showing up in the same sentence as "attack."

Loopscale isn't a small player by Solana DeFi standards. DefiLlama puts its total value locked at roughly $90.2 million as of November 5. The protocol has facilitated more than $2 billion in loans since launch. That's real money sitting idle right now, with depositors unable to withdraw or adjust positions until the team says otherwise.

For Loopscale's depositors, the immediate practical reality is simple. Their funds are, per the protocol's own claim, intact and sitting in replenished vaults. But they're also frozen, with no stated timeline for when lending and borrowing resume. Loopscale hasn't published a formal post-mortem yet. Until it does, or until the four flagged wallets are tied to something concrete, depositors are left waiting. They're waiting in the gap between "no funds lost" and "we don't know what happened."

Also read: Trump Media moved $434 million in bitcoin to Crypto.com on Wednesday • Grok now drives most of Coinbase's AI agent trading volume • Zcash's NU7 Upgrade Goes Live as ZEC Holds Gains From Its 1,500% Rally

This article is posted in Crypto News, check it out for more related stories.