Venus Protocol Detects $3.7M Supply Cap Attack on THE Pool

TheNewsCryptoPublicado a 2026-03-16Actualizado a 2026-03-16

Resumen

Venus Protocol detected a suspicious trading activity in its THE token liquidity pool on March 15. The incident, identified as a supply cap attack, occurred in two phases. First, the attacker accumulated approximately 84% of the total Thena token market capitalization. Then, they used these holdings as collateral to borrow other assets, including 6.67 million CAKE tokens, 1.58 million USDC, 2,801 BNB, and 20 Bitcoin, resulting in over $3.7 million in losses. Only the CAKE and THE pools were directly affected. In response, Venus halted all THE borrows and withdrawals, as well as those for other low-liquidity tokens. This attack represents a notable protocol-level exploit in DeFi for 2024.

On March 15, Venus Protocol revealed that it has found some suspicious trading activity in its liquidity pool for the Thena (THE) token. For clarification, Venus operates as a lending and borrowing platform, and THE is the native token of the Thena DeFi platform.

Venus has appointed Allez Labs as its risk manager, which stated that the incident seems to be a supply cap attack and it unravelled in two phases. The first phase shows that the attacker gradually collected around 84% of the overall Thena token market capitalisation.

The second phase included the attacker using those holdings as collateral to borrow other assets from the platform. The borrowed assets comprised 6.67 million CAKE tokens, 1.58 million USDC, 2,801 BNB, and 20 Bitcoin, as reported by Allez Labs.

The overall value lost in the attack surpassed $3.7 million, revealed by Wu Blockchain. Only the CAKE and THE pools were directly impacted by the exploit.

The Notable Attack

Venus Protocol replied by halting all THE borrows and withdrawals quickly. The team mentioned in a statement that this will stay in effect until the investigation is taken to end. As an extra precaution, Allez Labs mentioned Venus also shut withdrawals and borrowing for various other low-liquidity tokens on the platform.

The attack is one of the more noteworthy decentralised finance security incidents of this year. The overall losses via crypto hacks slipped to $49 million in February, the lowest monthly figure in around a year, as per the blockchain security company PeckShield.

That slip in hack-associated losses was, although, accompanied by a surge in phishing and social-engineering attacks aiming at individual users.

Nominis, a blockchain intelligence platform, mentioned that a lot of individual attacks in February comprised phishing websites, malicious signature requests, and address poisoning scams made to steal private keys.

The Venus incident shows a different threat category, one aiming protocol-level mechanics instead of individual user credentials.

Highlighted Crypto News Today:

Playnance Partners With KGeN to Expand Web3 Gaming Distribution Network

TagsHackHack AttackVenus

Preguntas relacionadas

QWhat type of attack did Venus Protocol detect on its THE pool?

AVenus Protocol detected a supply cap attack on its THE pool.

QWhat was the total value of assets lost in the attack on Venus Protocol?

AThe total value lost in the attack surpassed $3.7 million.

QWhich two token pools were directly impacted by the exploit?

AOnly the CAKE and THE pools were directly impacted by the exploit.

QWhat immediate action did Venus Protocol take in response to the attack?

AVenus Protocol halted all THE borrows and withdrawals, and also shut withdrawals and borrowing for various other low-liquidity tokens on the platform.

QWhat was the first phase of the attack as described by risk manager Allez Labs?

AIn the first phase, the attacker gradually collected around 84% of the overall Thena token market capitalisation.

Lecturas Relacionadas

Who Funds the Agents?

**Summary: Who Funds AI Agents?** OpenAI recently shut down a feature allowing AI agents to shop for users, highlighting the challenge of creating a secure and regulated environment for agent-driven transactions. While payment infrastructure exists, a crucial governance layer—defining spending limits, fraud detection, tax handling, and return policies—is largely missing. The potential is enormous: AI agents already processed $73M across 176M transactions last year, with McKinsey forecasting this could grow to $3-5T in global consumer commerce by 2030. The core competition isn't just about processing payments, which can be very cheap (especially with crypto-based settlement), but about controlling the rules that govern agent spending. Key players like Stripe and Coinbase are racing to dominate this governance layer. Stripe's acquisition of wallet provider Privy allows it to set spending policies, identity checks, and human-in-the-loop approvals directly at the wallet level. Similarly, Coinbase's stack, including its x402 protocol and AgentKit, embeds governance rules. This vertical integration across settlement, wallet, and governance layers is becoming the dominant strategy. Control over the governance layer is where significant future value lies. If agents handle trillions in transactions, even a small fee for managing compliance, fraud prevention, and policy enforcement could generate billions in annual revenue. The companies that successfully integrate across the payment stack will capture value from idle agent balances, transaction fees, and governance services, positioning themselves as the foundational banks of the AI agent economy.

marsbitHace 13 min(s)

Who Funds the Agents?

marsbitHace 13 min(s)

A Nation Blocks Chips, a Giant Buys a Nuclear Power Plant: Why It's Time to Seriously Consider DeAI

**Title: Great Powers Blockade Chips, Giants Buy Nuclear Plants: Why It's Time to Seriously Consider DeAI** In May 2026, the US closed loopholes for Chinese firms to acquire advanced NVIDIA chips via overseas subsidiaries. That same month, Kenya halted a $1B geothermal data center project involving Microsoft, fearing its immense energy consumption. Meanwhile, Huawei announced mass production of its Ascend AI chip. These disparate events underscore a new reality: the competition for computing power ("compute") has escalated beyond the tech industry, becoming a geopolitical and infrastructural battleground. A new era of oligopoly is forming, with control over the AI stack—from GPU chips (NVIDIA) and cloud platforms (AWS, Azure, Google Cloud) to foundational models (OpenAI, Anthropic)—concentrating in a few Western "AI Octopus" corporations. This centralization creates systemic risks: pricing power and platform lock-in for users, infrastructure fragility, and a widening "compute divide" that threatens to marginalize nations without independent AI capacity. An "AI Iron Curtain" is deepening through export controls. In response, some nations like Saudi Arabia and the UAE are investing heavily to buy compute power, aiming to transition from oil to AI economies. The EU seeks to triple its compute capacity by 2030 to reduce dependency. However, the spending gap is vast, with four US tech giants alone planning ~$750B in AI capex for 2026. The race is increasingly constrained by energy, with AI tasks consuming up to 1000x more power than web searches, pushing firms to even acquire nuclear plants. This landscape is fueling interest in Decentralized AI (DeAI). It proposes a third way: using open protocols to coordinate a global network of idle GPUs, independent developers, and data centers, creating an AI infrastructure without a single controlling entity. Leveraging blockchain and cryptographic verification, DeAI aims to break market concentration, disperse energy demands, reduce geopolitical dependencies, and enhance transparency. While still nascent in performance and stability, DeAI's core promise is not immediate superiority but providing a crucial alternative architecture to resist monopoly, censorship, and centralized power. As specialized AI hardware costs fall and open-source models flourish, the window to build this foundation is open. The very existence of such competition serves as a vital check against the inevitable abuse of concentrated power.

marsbitHace 1 hora(s)

A Nation Blocks Chips, a Giant Buys a Nuclear Power Plant: Why It's Time to Seriously Consider DeAI

marsbitHace 1 hora(s)

Trading

Spot
Futuros
活动图片