Demo Lending pauses one pool
The team paused one pool after a suspected exploit. Other depositors are not known to be affected, and a post-mortem is promised.
Placeholder Bridge reopens after exploit
The team says users were repaid from its treasury after a $2.1M exploit. An outside audit is still pending.
What to do now
- Check the repayment list on the official site.
- Beware of fake claim pages. Repayments did not require you to connect a wallet.
Are you affected?
You were affected if you used the listed route during the exploit. The project’s post-mortem lists the transactions.
Ignore messages offering a fix, a refund or a recovery service. Never share your seed phrase or private key.
Confirmed
- The team published a post-mortem and a repayment list.
Claimed
- The team says the flaw has been fixed.
Unknown
- The result of the outside audit.
What happened
An attacker exploited a message-checking flaw on one route. The team paused the bridge, repaid users and reopened three weeks later.
Update log
24 Oct 2026, 10:15 UTC: Latest update to this sample report.
Sources
[The Editor links primary sources here before publication.]
Disclosures
[AI use, holdings and commercial relationships are shown here.]