Loopscale Reopens After Malicious API Attack

• •Loopscale suspended operations on November 5 due to a targeted API attack.
• •The attack involved over 30,000 malicious requests per day, affecting SOL and USDC vaults.
• •No user deposits were lost, and operations resumed on November 7 with ongoing security improvements.

Loopscale, a Solana-based lending protocol, resumed operations on November 7, 2026, after a pause due to a week-long attack that generated over 30,000 malicious API requests daily. The attack targeted its SOL and USDC Genesis vaults, but the team confirmed that user deposits were not lost. The protocol had temporarily halted activities on November 5 to investigate the incident and implement security measures. During the attack, vulnerabilities in program logic and private transaction-building APIs were exploited, leading to an undercollateralized loan and inflated asset values. The team identified two attack paths and contained the issues within 30 seconds of detection. Although operations have resumed, further details on security enhancements and loss accounting are pending.