Lava Lending exploit (2024-03-28) — attacker addresses
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-15
- Last updated: 2026-10-16
Lava Lending exploit on Arbitrum, 2024-03-28. DeFiHackLabs summary: LavaLending - Business Logic Flaw. Loss as recorded by DeFiHackLabs: ~340K. Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0x851aa754c39bf23cdaac2025367514dfd7530418 — labeled "attacker" (Arbitrum; https://arbiscan.io/address/0x851aa754c39bf23cdaac2025367514dfd7530418) - 0x3e52c217a902002ca296fe6769c22fedaee9fda1 — labeled "attack contract" (Arbitrum;…
Other addresses in this report: 0x851aa754c39bf23cdaac2025367514dfd7530418, 0x42fae47296b26385c4a5b62c46e4305a27c88988