Loopscale Temporarily Shuts Down Amid Surge in Malicious Attacks on Vaults

Loopscale Suspends Services Amid Security Threats

Loopscale, a lending platform operating on Solana, has announced a temporary suspension of its services due to a significant uptick in malicious attempts targeting its SOL and USDC vaults. The decision comes after the platform faced a week-long campaign characterized by over 30,000 daily attacks on its API, prompting immediate action from its team to safeguard user assets, which remain secure.

In a statement released on November 5, Loopscale described the situation as a targeted campaign orchestrated by a sophisticated actor.

The protocol's security measures were promptly triggered in response to this alarming escalation, leading to a halt in operations to mitigate potential damage.

Details of the Attack

As outlined in an update on Loopscale's Discord channel, the attacks were specifically directed at the older Genesis vaults of the platform. While the affected vaults have been restored to health, the organization has yet to disclose the extent of the financial impact or the specific tactics employed by the attackers.

The team is prioritizing the restoration of loan repayment functionalities, as borrowers could face unexpected liquidations due to the ongoing suspension of regular lending activities. In decentralized lending systems like Loopscale, users typically leverage cryptocurrency as collateral for loans; a decline in collateral value below a necessary threshold can trigger liquidation, heightening the importance of the repayment mechanism in times of market instability.

Investigation and Future Plans

While the protocol plans to resume its user interface soon, full operations are contingent upon the thorough investigation and implementation of additional security measures. The status of loan repayments remains uncertain without a definitive timeline for reinstating these critical services.

To address the security breach, Loopscale has pinpointed four suspicious wallet addresses involved in the assault—two tied to Solana and two in Ethereum formats. The team is currently collaborating with federal law enforcement agencies and cybersecurity professionals as the investigation progresses. However, details regarding the identity of the suspected attacker and the precise agencies involved remain undisclosed.

Historical Context and Industry Implications

This security breach follows a previous incident in April 2025 when Loopscale experienced a substantial loss of approximately $5.8 million due to an exploit targeting the protocol's token pricing structure. That attack allowed the perpetrator to extract about 5.7 million USDC and 1,200 SOL, impacting users primarily within the SOL and USDC vaults while leaving other functionalities unaffected. After negotiating with the attacker, the team successfully recovered the majority of the stolen assets and gradually resumed services.

The latest incident highlights ongoing vulnerabilities within decentralized finance (DeFi) platforms, which have become frequent targets for cybercriminals. A recent report from CertiK highlighted that cryptocurrency-related hacks and scams resulted in losses of around $364 million in April 2025 alone. As DeFi continues to evolve, the need for robust security protocols remains paramount to protect user investments and ensure the integrity of lending platforms like Loopscale.