ZkLend

Exploit & recovery timeline

1. Apr 9, 2025 · 05:00 UTC
   Attack preparation

   Attacker wallets funded and staged ahead of the smart contract bug exploit against ZkLend.

2. Apr 9, 2025 · 07:00 UTC
   Exploit executed

   $9.5M drained from ZkLend on Ethereum via Smart Contract Bug.

3. Apr 9, 2025 · 08:00 UTC
   Detected by PeckShield

   PeckShield flagged the anomalous transactions and published an initial alert.

4. Apr 9, 2025 · 11:00 UTC
   Protocol response

   ZkLend paused affected contracts or withdrawals and began tracing outbound flows.

5. Apr 10, 2025 · 07:00 UTC
   Funds traced

   Stolen assets followed through mixers, bridges, and exchange deposit addresses.

6. Apr 16, 2025 · 07:00 UTC
   Partial recovery

   $3.0M of $9.5M recovered (32%); the remainder is still unaccounted for.

7. May 9, 2025 · 07:00 UTC
   Investigation continues

   Remaining funds monitored across chains with exchange partners notified.