Back to dashboard
Tuesday, March 17, 2026 at 05:11 UTC

PolyLend

Rounding error patched; funds returned via bounty.

Recovered
Funds stolen
$14.30M
Recovered
$14.30M100%
Still outstanding
$0.00M
Chain
Polygon
Category
DeFi
Attack vector
Smart Contract Bug
Reported by
PeckShield
Incident ID
e9

Exploit & recovery timeline

  1. Mar 17, 2026 · 03:11 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the smart contract bug exploit against PolyLend.

  2. Mar 17, 2026 · 05:11 UTC
    Exploit executed

    $14.3M drained from PolyLend on Polygon via Smart Contract Bug.

  3. Mar 17, 2026 · 06:11 UTC
    Detected by PeckShield

    PeckShield flagged the anomalous transactions and published an initial alert.

  4. Mar 17, 2026 · 09:11 UTC
    Protocol response

    PolyLend paused affected contracts or withdrawals and began tracing outbound flows.

  5. Mar 18, 2026 · 05:11 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Mar 24, 2026 · 05:11 UTC
    Full recovery

    $14.3M returned to users — negotiation, freezes, or a whitehat return closed the incident.